Connect to VIP from real (internal) machines - loop back

[anachimuthu0]

Hi,

I have a setup similar to this example http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_configuration_example09186a008016c8e5.shtml

HTTP request comes and hits the CSS on the vip through external IP, gets into internal vip IP, which load balances to machine A, B & C.

Every machine can ping each other machine and can ping the internal and external vip addresses. HTTP Request comes in and gets load balanced fine, Everything works fine. life is good.

I have a requirement where any on the machines (A, B or C) should be able to connect to the VIP on port 80 (which will eventually gets loadbalanced to A, B or C like a loop back). How can i achive this?

Machine A, B and C are able to ping the vip address(both internal and external) but is not able to connect to port 80.

when i do a telnet to VIP(10.129.80.10) on port 80 from machine A (10.129.80.20), it takes a long time to connect and times out. in the CSS i can see the service hit and the flows listed.

CSS11503# sho flows

--------------- ----- --------------- ----- --------------- -- ---

Src Address SPort Dst Address DPort NAT Dst Address Prt InPort OutPort

--------------- ----- --------------- ----- --------------- --- -------

10.129.80.20 80 10.129.80.20 32799 10.129.80.22 TCP 1/2 1/2

10.129.80.20 32799 10.129.80.10 80 10.129.80.20 TCP 1/2 1/2

Can anyone tell me how to load balance requests to port 80 both from internal to CSS machines and external to CSS works.

thanks in advance,

-Arun

[pknoops]

Arun,

The only way to achieve this is to use a "group" on the CSS which will NAT the initial server connection to the VIP and change it's source address.

Here is a link to how to configure groups (also known as source groups") on the CSS

http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_750/cntlbgd/sgrp.htm

Hope this helps..

Pete..