Hi,
hard to say with the provided information.
Where are the clients located and how are they routed. I would say in regards of VSVR1 that your server residing in 10.10.2.x will not work well as the connection from the clients is pointing to 10.10.1.100. the return from the server will (in my opinion) be routed to 10.10.2.254 so the return follow might break.
The same thing with the other subnets for VSVR2.
Another thing that might hit you with both Vservers: Are the reals located in the server-vlans (121/131)?
Suggestion:
Do two sniffer-traces at the same time with the following settings:
- 1st sniffer in VLAN 120
- 2nd in the VLAN where your server (10.10.2.10) resides
- inactive all reals except 10.10.2.10
- try to connect to VSVR1 and have a look at the traces afterwards
If the conncetion breaks you might use client NAT but this possibility has to be verified with the application-guys and if the real source IP is needed for logging or other purposes.
Cheers
Joerg