css11501 -- retaining client source ip

[john.hackett]

any help is appreciated.

client --> css11501 --> web servers

i want the web servers to see the client ip address as the source address. what is the best method to acheive this? or a link to some information on this...thank you

[Gilles Dufour]

if you do not configure a 'group', the css will not change the client ip.

This requires that the path server -> client goes back through the CSS.

Either with static routes, or policy routing.

If you can't have your path go back to the CSS, then you need the group to nat the client ip and in this case there is no way to preserve the info.

Gilles.

[damico_nick]

Gilles ..... Is there an example of creating this group for client side nating??

I looked everywhere and cannot find anything.

Thanks!

-N

[Gilles Dufour]

simply configure it like this

group

vip x.x.x.x [whatever ip that belongs only to the CSS]

add destination service

[repeat previous line for every service that requires nating]

inservice

!

Here is a link to the config guide for more info

http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_command_reference_chapter09186a008028fe44.html

Gilles.