Can CSS11000 work with all interfaces in same subnet?

[wagnerch]

Hi,

I would like to know if I can put a CSS11000 into one IP-subnet only so that the input interface is in the same subnet as the output server-interfaces. This would make my addressing much easier and also a failover if the CSS11000 is dead.

PS: CSS11000 should act as load-balancer and should detect a dead server.

Regards,

Chris

[lynchp]

Hi,

No problem with doing this. Be aware but there are some dangers. You must make sure any loadbalanced session is seen coming in and going out. The CSS needs to see both incoming and out going packets.

Cheers

Phil Lynch

Cisco Systems

[ngorenko]

Hi Chris,

You can do this, but this is not recommended by security reason.

To detect dead-service (not server), you need to configure keepalives.