I am having a problem on my css11503. My server guys want to be able to have one set of application servers talk to the vip for another application on the same css. If the traffic is generated from external to the css it works fine, but the problem is when the server that is on the same network tries to communicate to the vip to be load balanced to another server on the same network.
I've seen this before a number of times. If I'm reading this right you have your real servers on the same network (ex. 10.10.10.x/24).
So when serverA hits VIP associated with serverX and serverY...serverX/Y will not send the traffic back thru the CSS because the CSS just passes serverA's IP to serverX/Y and serverX/Y see's it's on the same subnet as serverA and tries to respond directly back to serverA. This obviously breaks the communication because serverA is expecting a response back from the VIP.
There are a couple options to get around this.
Put serverA and serverX/Y on different subnets on the backside of the CSS (vlan trunking to your switch)
configure a source group nat for serverA, thereby forcing the traffic to go back thru the CSS
Join us on Wednesday, June 2 at 10 am PT/ 1 pm ET as we discuss what tomorrow's cloud will be and what you need to know to prepare.
Accelerate your IT to a cloud operating model and get the information you need to be cloud smart, no matter how many cloud...
Thanks for attending our ATXs sessions! Here’s the post-session resources for easy reference.
New to ATXs? An ATXs session, offered at no cost, is an hour of real-time learning led by Cisco experts, who will answer your technology questions through produ...
Thanks for attending our Ask the Experts (ATXs) sessions! Here’s the post-session resources for easy reference.
New to ATXs? An ATXs session, offered at no cost, is an hour of real-time learning led by Cisco experts, who will answer your technology quest...
New Cisco Champion Radio release on Cisco Intersight Cloud Operations PlatformListen: https://smarturl.it/CCRS8E15Follow us: https://twitter.com/CiscoChampion Known as Project Starship when it was introduced in June 2017, Cisco Intersight has come a ...