Virtual IP and server IPs on the same subnet?

[alec.waters]

Hi,

Is it possible to have the VIP and the IPs of the individual servers on the same subnet when the CSS is used in-line?

thanks a lot,

alec

[jfoerster]

Hi Alec,

this is only possible if you configure the CSS in "one-armed configuration mode". In other words the servers have to think, that the request is comming from the CSS so that the return flow is directed to the CSS and NOT to the client directly. In other words you have to use source-NAT done by source-groups or ACLs.

Kind regards,

Joerg

[Gilles Dufour]

the vip can be in any subnet [even a subnet not configured on the CSS] as long as the rest of the network knows how to reach this vip via the CSS.

No need for one-armed.

No need for source-group.

Regards,

Gilles.