Raman LoadBalncer will accept connection on different ports and then it will translate the destination ports. For e.g  let say you have two VIPs configured x.x.x.1 : 80 x.x.x.2 : 8080 and you want to use same real server (z.z.z.z)  listening on port 80. When a request reaches Loadbalancer for x.x.x.1:80  it will tranlsate the destination IPs and ports to   z.z.z.z:80 Similarly for a request for x.x.x.2:8080 it will again  translate the destination IPs & POrts  to z.z.z.z.:80 Server replies in both cases will reach Loadbalancer which will identify the appropriate response for each request. Hope this helps Syed Iftekhar Ahmed ... View more

Your understanding is correct If ACE is confgiured in routing mode ace just  become a router and allow the connections through, without any load balancing or matching of a class-map. There are two conditions 1. ACLs should be configured on ACE to allow the through traffic. 2. There is no SLB policy applied on Server side interface Also  valid routes for realserver vlans should exist on upstream L3 devices to ensure that the return traffic can reach real servers. Thanks Syed iftekhar Ahmed ... View more

You need ACL to allow traffic "through the ace"  on each interface access-list ALL line 10 extended permit ip any any access-list ALL line 20 extended permit icmp any any interface vlan 7      access-group input ALL     no shutdown interface vlan 171    access-group input ALL     no shutdown HTH Syed Iftekhar Ahmed ... View more

I will try to explain why its not working. Assuming you are initiating request from serv1 ( 192.168.44.10) 1. When your request from Real Server reaches CSS the IP addresses in the packets are (src IP: 192.168.44.10 , dest ip : 192.168.45.100) 2. Lets suppose using LB algorithm CSS selects serv2 as the destination server.IP add in Packet that reaches serv2 will be (src IP: 192.168.44.10 , dest ip : 192.168.44.11) 3. Now serv2 sees this packet coming from serv1(192.168.44.10), since this ip is on tha same subnet as serv2 it will not send the reply back to CSS, rather it will try to deliver it direclty to serv1. 4. Serv1 never initiated request for serv2 (192.168.44.11), as a result will drop this reply (Note: serv1 is expecting a response from VIP i.e 192.168.45.100) You will need to source NAt the traffic generated from the Real Servers. This can be achieved by using source groups in CSS. Try the following config group xyz   add destination service serv1   add destination service serv2   vip address 192.168.45.100 With the above config, if serv2 gets selected as mentioned in the above example then the request it recieves from serv1/serv2 will have the 192.168.45.100 as the source IP. HTH Syed Iftekhar Ahmed ... View more