Traffic between two real server from same VLAN but different Server Farm

[rc5295509]

Hi,

I have a trouble, I need that two real server from different serverfarm, but both are in the same VLAN and they are in the same context.

real server A, server farm A  need to comunicate with real server B with server farm B.

How is the best configuration for achieve this?

[Kanwaljeet Singh]

Hi,

Please find the example below:

access-list ANYONE line 10 extended permit ip any any

rserver host SERVER_01
  ip address 192.168.1.11
  inservice
rserver host SERVER_02
  ip address 192.168.1.12
  inservice
rserver host SERVER_03
  ip address 192.168.1.13
  inservice

serverfarm host REAL_SERVERS
  rserver SERVER_01
    inservice
  rserver SERVER_02
    inservice
  rserver SERVER_03
    inservice

class-map match-all REAL_SERVERS
  2 match source-address 192.168.1.0 255.255.255.0----->Server range from where connection will originate

class-map match-all VIP-30
  2 match virtual-address 172.16.51.30 tcp eq www--->VIP on which the connections from clients as well as servers will come.

class-map type management match-any REMOTE_ACCESS
  description remote-access-traffic-match
  2 match protocol telnet any
  3 match protocol ssh any
  4 match protocol icmp any

policy-map type management first-match REMOTE_MGT
  class REMOTE_ACCESS
    permit

policy-map type loadbalance first-match SLB_LOGIC
  class class-default
    serverfarm REAL_SERVERS------>connections would be loadbalanced to this server after condition matches.

policy-map multi-match CLIENT_VIPS
  class VIP-30
    loadbalance vip inservice
    loadbalance policy SLB_LOGIC
    loadbalance vip icmp-reply active

  class REAL_SERVERS
    nat dynamic 1 vlan 451---->Traffic from real servers will be source natted so that return traffic also goes through the ACE and not directly since real servers are in same subnet.

interface vlan 251
  description Client vlan
  ip address 172.16.51.11 255.255.255.0
  access-group input ANYONE
  service-policy input REMOTE_MGT
  service-policy input CLIENT_VIPS
  no shutdown

interface vlan 451
  description Servers vlan
  ip address 192.168.1.1 255.255.255.0
  access-group input ANYONE
  service-policy input CLIENT_VIPS
  nat-pool 1 192.168.1.10 192.168.1.10 netmask 255.255.255.0 pat
  no shutdown

ip route 0.0.0.0 0.0.0.0 172.16.51.1

Please try and see if this helps.

Regards,

Kanwal

[rc5295509]

Hi..

And this work when you have a second server farm and another VIP?  look the diagram.. 

[Kanwaljeet Singh]

Hi,

Yes, it should work. So request from real server 192.168.1.11 will hit the VIP 40 and will get loadbalanced to  real server 4 under serverfarm 2 . Source NAT should be applied to traffic originating from real server1 so that returning traffic from real server4 comes via ACE and not directly.

Regards,

Kanwal