Showing results for 
Search instead for 
Did you mean: 

CSM module: rserver to rserver (or VIP) connections between serverfarms


I am trying to audit an existing configuration of CSM module.

Unfortunately have not an experience in CSM module configaration.

The main goal is to understand if there are any direct connection between servers

in different serverfarms (i.e. server from one serfarm opens session to server in

second serverfarm to VIP or to real IP). Also I need to know if there exist any

server initiated connection.

For serverfarms in CSM configuration there are two options configured


nat server

nat client <pool>


nat server

no nat client

As I understand, if there is no "static nat" lines in CSM configuration it means that

there can not be server initiated connections. Is this correct?

What is the best way to check if there are any direct connections between different serverfarms?

Is it enough to take an output of "show conn" command like

    prot vlan source                destination           state      


In  UDP  149     ESTAB      

Out UDP  449    ESTAB      

and check if there is "In" connection from <source IP> in one serverfarm to <destination IP>

in second serverfarm? As for now I did not see such connections.

Will be presented direct server-server/VIP or server initiated connections in "sh conn" command

output for CSM module?

Could you advise me how to check this in CSM configuration or show commands output?

Thank you in advance.


If the vserver to vserver connection is made between devices in the same subnet and the client uses the vsever address (rather than a vip address) then this will not be seen via the CSM at all. If the client vserver targets the vip address, then it is probable that you will require source nat to make it work. If a vserver starts a connection to another vserver addess (not vip) in a different subnet and the connection flows via the CSM,  then the CSM will show this in its connection table. You can test this via "telnet " and check the connection table. Any working vserver to vip connections will be visible in the connection table. Matthew

Content for Community-Ad
This widget could not be displayed.