Load Balancing remote server in CSS11800

[drazik]

I configure to loadbalance remote server.

----------------Network Diagram-----------------

user-SW--CSS11800---CoreSW----BBSW----server1

.......................................................................|-----server2

------------------------------------------------

configuration CSS11800

service server1

ip address 192.168.10.1

active

service server2

ip address 192.168.10.2

active

owner Vserver

content L3_rule

vip address 192.168.100.100

add service server1

add service server2

active

group out-bound-NAT-vserver

vip address 192.168.100.100

add service server1

add service server2

active

--------------------------------

User can connect server1 with telnet.

User can connect server2 with telnet.

User can't connect Vserser(192.168.100.100) witch telnet.

Ping is successful to Vserver from user.

why can't connect to Vserver?

Any configuration is need remote server loadbalance?

[sbilgi · Accepted solution]

This configuration looks fine. Check if there are any known issues.

[sagdas]

Hey,

Can you paste the full config.. Is there any acl ?

Regards,

Sagar

[drazik]

I have solved this problem.

But need configuration about "add destination service server#" ,not "add service server#" in CSS11800.

group out-bound-NAT-vserver

vip address 192.168.100.100

add destination service server1

add destination service server2

active

[sagdas]

Hey,

Good to hear this.. So the issue was asymetric routing. The add destination service is used to NAT the soure ip in the packets which come to the vip and are destined to the servers. The CSS changes the source ip to the ip of the VIP (which is specified in the group). For the server, the client's ip is the ip of the CSS and it replies back to the CSS and not directly to the original client.

Here is a link which you can go through.. :-)

http://www.cisco.com/en/US/partner/products/hw/contnetw/ps789/products_configuration_example09186a0080093dff.shtml

Cheers!!!

Sagar