VIP on the Server Vlan

[lbee]

Hi,

I am using the router mode load balancing. I checked the documentation and found that the VIP (virtual serer IP) is always the IP address on the Client vlan. The only time i saw the VIP on the server LAN is when we are using Direct Access.

My question is can we use a virtual ip address on the Server LAN and load balance it to few real servers in the same Server LAN and with NAT of course.

Thanks for the help.

vserver VIP1

virtual 10.208.50.1 tcp 8888

serverfarm FARM1

sticky 10 group 1

persistent rebalance

inservice

serverfarm FARM1

nat server

no nat client

predictor leastconns

real 10.208.50.7

inservice

real 10.208.50.8

inservice

probe TCP-8888

probe TCP-8008

Bee

[Gilles Dufour]

the vip address can be any address. Server subnet. Client subnet or even subnets not even configured on the CSM.

The only rule is to make sure the rest of your network knows how to reach it through the CSM.

Regards,

Gilles.

[testas]

Yes, you can configure VIPs in the server VLAN IP subnet, there are no problems: as you say, the only thing to keep in mind is that if source and destination devices are on the same L2 domain, you need to use source NAT to make sure that return traffic does not bypass the CSM.

An example of VIP in a server VLAN can be found here:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/mod_icn/csm/csm_4_2/config/cfgxpls.htm#wp1008442

Also, you might want to configure the vserver with the "vlan" option so that you limit the VLAN from which the devices can connect to that vserver.

As a side note, keep in mind that virtual servers (VIPs) on the CSM can be in any IP subnet, including subnets that are not configured on the CSM itself (in this case, the adjacent device needs to have a route of some sort pointing to the CSM.

Hope this helps,

Stefano