06-22-2012 12:11 PM
Hi there,
I have both CSM's and ACE in my environment, and on my CSMs I can configure a serverfarm with real servers that have a weight of 0. The purpose for this is to allow outbound connections from any server in the farm to use the VIP address as the source IP, but only allow inbound connections to one server. Is there a way to configure something similar on the ACE? I found that the rserver weight must be between 1-100 on the ACE, so that seems to be out.
Any help would be appreciated.
Thanks,
Brandon
Solved! Go to Solution.
06-22-2012 11:36 PM
It is much easier in ACE.
Define a class map which is matching your server ip or server subnet
class-map match-any realserver
2 match source-address 10.10.50.50 255.255.255.255 (This represent as host you can even match a subnet )
So you can see we are not even involving the serverfarm here.
Under multimatch policy
class servers
nat dynamic 1 vlan 346
Under vlan interface
nat-pool 1 10.10.70.11 10.10.70.11 netmask 255.255.255.255 pat ( Here IP address is one of the VIP addres
That's All you need to do.
Hope that helps.
regards,
Ajay Kumar
06-22-2012 11:36 PM
It is much easier in ACE.
Define a class map which is matching your server ip or server subnet
class-map match-any realserver
2 match source-address 10.10.50.50 255.255.255.255 (This represent as host you can even match a subnet )
So you can see we are not even involving the serverfarm here.
Under multimatch policy
class servers
nat dynamic 1 vlan 346
Under vlan interface
nat-pool 1 10.10.70.11 10.10.70.11 netmask 255.255.255.255 pat ( Here IP address is one of the VIP addres
That's All you need to do.
Hope that helps.
regards,
Ajay Kumar
06-23-2012 08:50 PM
Hi Ajay,
Thanks for the response. That did the trick! Thanks again!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide