CSS Flow

emily — Fri, 30 Jul 2004 14:20:13 GMT

Is possible , The CSS connect real server use circuit vlan IP(61.218.77.150) through Intranet-PIX

, But according with Intranet-PIX debug message , I found that CSS forward outside client ip to Intranet-PIX , that violate my company policy .

Is possible , I need that CSS used circuit vlan ip to connect real server ?

How can i do it

Re: CSS Flow

Gilles Dufour — Sun, 01 Aug 2004 05:53:11 GMT

The CSS can't use its circuit ip address for connections hitting a VIP.

However, you can tell the CSS to use a natted address of your internal vlan.

For this, use the followings config.

Assuming your VIP is like this :

owner blah

content WEB

vip address x.x.x.x

add service server1

add service server2

....

Then configure the following to achieve natting of client address

group blah

vip address y.y.y.y

add destination service server1

add destination service server2

active

The y.y.y.y address can be whatever address you want but not an ip address already used for a CSS circuit address.

Regards,

Gilles.