cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3353
Views
0
Helpful
1
Replies

ACE 4710 route mode with X-Forwarded-For

ctychan
Level 1
Level 1

Any config example for ACE4710 with below requirements

1. Route mode

2. X-Forwarded-For to add source client IP to http header

1 Reply 1

Sean Merrow
Level 4
Level 4

Here you go...

access-list ANYONE line 10 extended permit ip any any

probe tcp TCP

rserver host SERVER_01
  ip address 192.168.1.11
  inservice
rserver host SERVER_02
  ip address 192.168.1.12
  inservice
rserver host SERVER_03
  ip address 192.168.1.13
  inservice

serverfarm host REAL_SERVERS
  probe TCP
  rserver SERVER_01
    inservice
  rserver SERVER_02
    inservice
  rserver SERVER_03
    inservice

class-map match-all VIP-30
  2 match virtual-address 172.16.51.30 tcp eq www

policy-map type loadbalance first-match SLB_LOGIC
  class class-default
    serverfarm REAL_SERVERS
    insert-http X-Forwarded-For header-value "%is"

policy-map multi-match CLIENT_VIPS
  class VIP-30
    loadbalance vip inservice
    loadbalance policy SLB_LOGIC
    loadbalance vip icmp-reply active

interface vlan 251
  description Client vlan
  ip address 172.16.51.11 255.255.255.0

  access-group input ANYONE
  service-policy input REMOTE_MGT
  service-policy input CLIENT_VIPS
  no shutdown
interface vlan 451
  description Servers vlan
  ip address 192.168.1.1 255.255.255.0

  no shutdown

ip route 0.0.0.0 0.0.0.0 172.16.51.1

Hope that helps,

Sean

Review Cisco Networking for a $25 gift card