cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
589
Views
0
Helpful
3
Replies

Viewing real server and client IP address in CSS using single arm config

cltoh
Level 1
Level 1

Hi,

How can I view the actual server and client IP address in a single flow when I configure the CSS using single arm configuration?

3 Replies 3

seilsz
Level 4
Level 4

Can you please expand on your question? Are you asking how you can preserve the client IP address when using the CSS in a one-arm configuration?

~Zach

Yes. I would like to view which client connects to which server for security audit purposes? Any way to do it using one arm config?

Ok. You can preserve the client IP address, but you will need to make sure that the return traffic (server -> client) goes through the CSS. You can do this by 1) making the CSS the default gateway for the servers, or 2) using Policy-Based Routing (PBR) to redirect responses from the servers back through the CSS.

You should also note that there have been numerous performance caveats documented in this forum regarding the use of the CSS in a one-armed configuration. Just serach the forum for 'arm' ...

~Zach

Review Cisco Networking for a $25 gift card