Good morning
We have many instances of configuration across many ace devies where we source nat traffic that is on the server side vlan of the ace module.
All of the vips in these examples are for tcp 80 or tcp 555 or tcp 443 etc etc
They are configured the usual way:
class-map match-any vip4
2 match virtual-address 2.2.2.100 tcp eq www
........
policy-map multi-match L7SLBCookie
class vip4
loadbalance vip inservice
loadbalance L7SLB_Cookie
nat dynamic 2 vlan ServerSideVlan
.....
interface vlan ServerSideVlan
nat-pool 2 2.2.2 2.2.2.2 netmask 255.255.255.255 pat
This works fine and the sh xlate looks like so:
TCP PAT from ServerSideVlan:2.2.2.3/1214 to ServerSideVlan:2.2.2.2/1368
However nowthat we are going to loadbalance exchange (which uses dynamic changing ports)
we need to use a vip that is configured for "any".
e.g
class-map match-any vip4
2 match virtual-address 2.2.2.100 (notice there is NO port, its default any)
........
policy-map multi-match L7SLBCookie
class vip4
loadbalance vip inservice
loadbalance L7SLB_Cookie
nat dynamic 2 vlan ServerSideVlan
.....
interface vlan ServerSideVlan
nat-pool 2 2.2.2 2.2.2.2 netmask 255.255.255.255 pat
THis will work for ONE client only, and they can have multiple connections. There is no port address translating at all
sh xlate:
NAT from ServerSideVlan:2.2.2.3 to ServerSideVlan:2.2.2.2 count:3 (<- telnetted to 3 diff ports, same server)
