06-26-2012 02:15 PM
hello ,
is there an equivalent to group command on ace to migrate :
group group_name
active
add destination service service_name1
add destination service service_name2
add destination service service_name3
Thanx for your support;
06-26-2012 06:04 PM
Hi,
ACE uses nat to accomplish that.
Here you have a sample:
access-list everyone line 8 extended permit ip any any access-list everyone line 16 extended permit icmp any any rserver host lnx1 ip address 192.168.1.11 inservice rserver host lnx2 ip address 192.168.1.12 inservice rserver host lnx3 ip address 192.168.1.13 inservice rserver host lnx4 ip address 192.168.1.14 inservice rserver host lnx5 ip address 192.168.1.15 inservice serverfarm host web rserver lnx1 inservice rserver lnx2 inservice rserver lnx3 inservice rserver lnx4 inservice rserver lnx5 inservice class-map match-all slb-vip 2 match virtual-address 172.16.5.100 any policy-map type management first-match remote-access class class-default permit policy-map type loadbalance first-match slb class class-default serverfarm web policy-map multi-match client-vips class slb-vip loadbalance vip inservice loadbalance policy slb nat dynamic 5 vlan 50 ----> nat process interface vlan 50 description "Client-Server VLAN" ip address 172.16.5.5 255.255.255.0 access-group input everyone service-policy input client-vips service-policy input remote-access nat-pool 5 172.16.5.200 172.16.5.209 netmask 255.255.255.0 pat --> natpool definition no shutdown ip route 0.0.0.0 0.0.0.0 172.16.5.1
Here you have a link with additional details about it:
Jorge
06-27-2012 12:59 PM
hello ,
ok it's just the same as configure SNat for client/servers hitting the same vip
am I right ?
06-27-2012 01:45 PM
Hi,
Yes, in that case you use the VIP
Jorge
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide