[ACE 4710] accessing server on serverfarm

[haarith.mahmud]

hi,

i have 2 servers in serverfarm.

the real IP for this 2 server are 172.16.34.5 and 172.16.34.6

the virtual IP is 172.16.33.1

the ip for vlan on server side is 172.16.34.10. the gateway on the 2 servers is 172.16.34.10

the network gateway for vlan 34 is 172.16.34.62

my question is, how can we access the individual server inside the server farm if we are not from the same vlan as the server?

[dario.didio]

Hi,

you need to create a static route on your upstream router for the server VLAN with next-hop the ACE.

In you case it will be something like this:

ip route 172.16.34.0 255.255.255.0 "ACE IP address of VLAN34"

In case you have fault tolerance configured, use the alias IP of the ACEs on VLAN34.

Don't forget that your ACL on the ACE needs to allow this traffic.

If you use permit any any it shouldn't be a problem.

HTH,

Dario