topic Direct access to the real servers via a CSS in Application Networking

Direct access to the real servers via a CSS

carlsond — Thu, 12 Aug 2004 19:49:03 GMT

How can I directly access my servers through a CSS. I thought I had seen a post addressing this but can only find CSM related posts.

Re: Direct access to the real servers via a CSS

Gilles Dufour — Fri, 13 Aug 2004 08:08:21 GMT

A CSS is simlpy a router/switch.

If you have a route on your host for the real servers subnet pointing at the CSS, then you can access them.

There is nothing on the CSS to block traffic sent directly to real servers.

Regards,

Gilles.

Re: Direct access to the real servers via a CSS

carlsond — Mon, 16 Aug 2004 12:50:58 GMT

Sorry I guess I wasn't very clear. The servers are on a non-routed subnet, ie 10.x.x.x and we would like to be able to acces the servers via the lan/wan for administrative purposes.

Re: Direct access to the real servers via a CSS

Gilles Dufour — Mon, 16 Aug 2004 15:36:45 GMT

Think about the CSS as a router.

From within your network, to access the servers in the 10.x.x.x subnet, all you need is to propagate the subnet to all the routers in your network.

To access the servers from outside your network, you need a device to do nating between the private address space to a public subnet.

Once again, think about the CSS as just a router.

Finally, I just would like to say that 'non-routed subnet' is not very appropriate terminology.

Any subnet is routable by any router in the world.

However, ISP's block traffic to/from private address space.

Regards,

Gilles.

Re: Direct access to the real servers via a CSS

carlsond — Thu, 19 Aug 2004 14:07:04 GMT

I'm not sure how to make the 10.x.x.x subnet visible on the public side of the network without changing to a bridge mode configuration (not desirable). I thought I had seen a post in the past explaining how to configure some sort of NAT right on the CSS for server administration. As for calling the 10.x.x.x net non-routed, I use the term because we are not routing it within our network, it stays behind the CSS.

Thanks.

Dave