CSM Bridge Mode Vserver Redirect

I have a CSM in bridge mode, the MSFC in on the client side.
vlan 28 client
ip address 192.168.29.253 255.255.254.0
gateway 192.168.28.253
vlan 173 server
ip address 172.17.3.8 255.255.255.0
alias 172.17.3.5 255.255.255.0
vlan 163 client
ip address 172.17.3.8 255.255.255.0
gateway 172.17.3.1
I want to have a VIP on the 28 vlan and redirect to a VIP on the 163 vlan. I'm not sure how to do that. Plus this is all netbios, so could I do it with a virtual x.x.x.x any
or do I have to specify tcp 137,138,139,445...
any ideas would be great...thanks

how can you redirect netbios traffic ???
We can use HTTP redirect but I don't think this works for Netbios - correct me if I'm wrong.
Therefore, I don't see how you can do a redirect.
Moreover, why would you want to redirect to another vip ?
As long as the traffic is coming to the CSM why don't you simply loadbalance to the end server ????
Thanks,
Gilles.

Similar Messages

Introduction of SSLM into a MSFC-FWSM-CSM Bridge Mode Configuration

Hi,
Need serious help here..
I'm facing a challenging situation here.
Customer just purchased a pair of SSLM module for their web server HTTPS termination.
Here's the situation.
Currently customer already have a pair of Catalyst 6509 running with MSFC->FWSM<->CSM Bridge Configuration (i.e. client and server vlan on the same subnet).
I've been assigned the task to deploy SSLSM module seaminglessly onto this existing setup without any other major configuration changes required on their systems by this week.
My question is currently they doing bridge configuration between FWSM - CSM. How do I transparently deploy SSLM in this situation ? without changing any i.p. addresses which will break their server-to-server communications.
I read and understand CSM-SSLM bridge configuration but that requires changing their i.p. addressing scheme? hopefully somebody shed some light on this...

I've attached a logical diagram of the existing setup as well as the SSLM placement (where i think it fits in).
I've also came up with a draft configuration below, i don't really understand NAT client and NAT server applications:
module ContentSwitchingModule 7
ft group 1 vlan 201
priority 110 alt 100
heartbeat-time 1
failover 3
preempt
vlan 6 client
ip address 192.168.20.4 255.255.255.0 alt 192.168.20.5 255.255.255.0
gateway 192.168.20.1
alias 192.168.20.6 255.255.255.0
vlan 60 server
ip address 192.168.20.4 255.255.255.0 alt 192.168.20.5 255.255.255.0
vlan 7 client
ip address 192.168.10.4 255.255.255.0 alt 192.168.10.5 255.255.255.0
alias 192.168.10.6 255.255.255.0
vlan 70 server
ip address 192.168.10.4 255.255.255.0 alt 192.168.10.5 255.255.255.0
vlan 40 server
ip address 192.168.60.4 255.255.255.0 alt 192.168.60.5 255.255.255.0
alias 192.168.60.6 255.255.255.0
probe ICMP icmp
interval 3
failed 5
probe HTTPWEB http
interval 3
failed 5
probe HTTPSWEB tcp
interval 3
failed 5
port 445
probe TCP tcp
interval 2
failed 3
serverfarm MOCINT-VIP1
nat server
no nat client
predictor leastconns
real 192.168.20.71
inservice
real 192.168.20.72
inservice
probe ICMP
probe HTTPWEB
serverfarm MOCWEB-VIP1
nat server
no nat client
predictor leastconns
real 192.168.10.65
inservice
real 192.168.10.66
inservice
probe ICMP
probe HTTPWEB
serverfarm SSL-MOCINT
nat server
no nat client
real 192.168.60.11 445
inservice
real 192.168.60.12 445
inservice
probe TCP
serverfarm SSL-MOCWEB
nat server
no nat client
real 192.168.60.21 445
inservice
real 192.168.60.22 445
inservice
probe TCP
sticky 10 netmask 255.255.255.255 timeout 20
sticky 20 cookie cookie-server timeout 30
vserver DECRYPT-MOCINT
virtual 192.168.60.10 tcp 445
vlan 40
serverfarm MOCINT-VIP1
replicate csrp sticky
persistent rebalance
parse-length 4000
inservice
vserver DECRYPT-MOCWEB
virtual 192.168.60.20 tcp 445
vlan 40
serverfarm MOCWEB-VIP1
replicate csrp sticky
persistent rebalance
parse-length 4000
inservice
vserver HTTP-MOCINT
virtual 192.168.20.70 tcp www
vlan 6
serverfarm MOCINT-VIP1
advertise active
sticky 20 group 10
replicate csrp sticky
persistent rebalance
parse-length 4000
inservice
vserver HTTP-MOCWEB
virtual 192.168.10.60 tcp www
vlan 7
serverfarm MOCWEB-VIP1
advertise active
sticky 30 group 20
replicate csrp sticky
persistent rebalance
parse-length 4000
inservice
vserver HTTPS-MOCINT
virtual 192.168.20.70 tcp https
vlan 6
serverfarm SSL-MOCINT
persistent rebalance
inservice
vserver HTTPS-MOCWEB
virtual 192.168.10.60 tcp https
vlan 7
serverfarm SSL-MOCWEB
persistent rebalance
inservice

CSM - Bridged Mode - Routed Mode Question

Customer's request involves setting up a backup (failover) BCR server to receive hand held device scan events.
The following needs to be performed:
- Build new server up as identical to AAEPRDBCR01 (named AAEPRDBCR02).
- Application to be installed onto the new server (configured identically to AAEPRDBCR01)
- Configure customer's CSM to parse requests to AAEPRDBCR01, and failover to AAEPRDBCR02. i.e. when BCR01 is unplugged the CSM should realise and begin parsing requests through BCR02. If BCR01 comes online again, the requests should once again fall back to BCR01.
I was thinking that the two servers would reside on eg.....VLAN 13 'BiscomBCR' and Users access these servers.
Does it need to be routed or can we do the same config in Bridged mode, where the servers have the same IP addressing?
Any pointers to any useful links is much appreciated.

You can do this in bridged mode. You can basically create a backup serverfarm which contains your new server. (CR02). It will only be used if the normal serverfarm containing your existing server (CR01) is unavailable.
Attached is a link to the CSM config doc - have a look at the config examples for the backup server farm. (Make sure you read the caveats about stickiness to understand what happens when the primary serverfarm comes back on line).
http://www.cisco.com/en/US/products/hw/switches/ps708/module_installation_and_configuration_guides_book09186a0080470b20.html
Hope this helps

CSM Bridged mode config issue

I currently have a CSM that is load balancing two web servers. Everything working great. I have two new web servers that are being used for a different system so I basically copied the old config, changed the names of the vservers, serverfarms and policies and expected the same result as the first.
What is happening is that when I ping the VIP, it gets redirected to one of the reals but then the real responds back instead of the VIP.
Not sure why that is happening.

Sean,
When you said "Typically, the rservers would use the same gateway you have configured on the client VLAN. The important thing to make sure of, is that you must make sure that the ONLY for these rservers to reach their gateway is through the CSM that is bridging the servers' VLAN to that client VLAN."
Now I assume you meant to say "Typically, the rservers would use the same gateway you have configured on the client VLAN. The important thing to make sure of, is that you must make sure that the ONLY way for these rservers to reach their gateway is through the CSM that is bridging the servers' VLAN to that client VLAN.
Well, I have a working bridging configuration for a different system and I have found that the real servers in my server vlan do have the client vlan IP address... But the server vlan is in fact a layer 2 vlan, it does not have it's own gateway so it has no other way out other than through the CSM and to the client vlan gateway, just as you said.
What I have found is that the server vlan for my new set up actually has its own gateway. Because of other servers in this vlan I cannot do away with it. So, I looked at an ealier post where you stated" If the adding source-NAT resolves the issue, then you know that asymmetric routing was your problem. One solution would be to leave the source-NAT config in permanently. The other would be to set the default gateway of your new servers to the CSM interface, and another would be to use policy-based routing."
The two solutions I am interested in is the client nat and the setting of the default gateway of the new servers to the CSM interface. Exaclty what interface are you referring? Are you referring to the IP address that bridges the client and server vlan together?
Regarding your client nat example, you mentioned that the client nat address is owned by the CSM, but in your example config I did not see that IP address at all so I am a little confused as to how the csm owns this IP.
I really appreciate your responses!

CSM bridge mode urgent issue.

Hi,
I have a pair of CSM running 4.2.6 (tried 4.2.7 too) on cat 6500 sup 720 chassis.
config is following :
vlan 902 server
ip address 192.168.1.36 255.255.255.224 alt 192.168.1.37 255.255.255.224
vlan 100 client
ip address 192.168.1.36 255.255.255.224 alt 192.168.1.37 255.255.255.224
vserver VS_MWINA_WWW
virtual 192.168.1.59 tcp www
serverfarm SF_MWINA_W
replicate csrp sticky
replicate csrp connection
persistent rebalance
inservice
real R_PARKINSON
address 192.168.1.42
inservice
real R_GUEDEL
address 192.168.1.39
inservice
serverfarm SF_MWINA_W
nat server
no nat client
real name R_SRV1 8098
inservice
real name R_SRV2 8098
inservice
I am sniffing on the PO to the CSM module and what I see is the SYN goin from the chassis to the blade, nothing else. then sometimes it goes well and I have SYN/ACK and ACKs following.
Any help would be greatly appreciated.

If it was transmitted, ok I didn't see it but I don't see where it would have gone.
The csm is a fine blade but sometimes not easy to trouleshoot I find.
With our config I don't see what could cause it to stop working.
Tech Proc 1 give me this
scsm1 tech proc 1
Software version: 4.2(7)
--------------------- SESSION Statistics ---------------------
Current time 438570 324085 1
Aborted rx 152564848 2673378996 10183
Total Packets rx 163666741 101777820 387
Packets Dropped 80262 59218 0
Packets Drop Stale Connection 22473 16390 0
Packets Drop No More Sessions 0 0 0
Packets Drop No VLAN 233026 172035 0
Packets Drop Bad Checksum 0 0 0
Packets Drop IP Fragments 0 0 0
Packets Drop SI with no SMAC 0 0 0
Packets Drop: SI, Route Mode, no DMAC 116827 115609 0
Packets Drop: Not IP, SNAP 0 0 0
Packets Drop: Zero L3 offset 0 0 0
Packets Drop: vlan/vs Force Drop 204 0 0
Packets Drop: Slowpath limit exceeded 0 0 0
Packets Drop: LP non-ip, non-arp 0 0 0
Packets Drop: TCP/UDP with zero port 1 0 0
Packets Drop: CDP 0 0 0
Packets Spanning Tree DMAC 0 0 0
Packets Repeat: Slowpath limit exceeded 0 0 0
Packets Rx on secondary vlan 0 0 0
Packets Slowpath 5056349 3584950 13
Packets Shakira 0 0 0
Packets High Priority 467142 346215 1
Packets Session Hit 43583067 12829485 48
Packets New Sessions 333858 142719 0
New Session- source route checks 79701 22473 0
New Session- source ecmp route 0 0 0
Packets Repeat 114240674 84857415 323
Packets Repeat Reverse Frag 0 0 0
Packets Repeat and Slowpath 0 0 0
Packets Force Repeat 0 0 0
Packets One Shot 0 0 0
Packets bad parse 0 0 0
Packets Session Hit TCP+NAT 0 0 0
Packets Session Hit TCP 1364769 591465 2
Packets Session Hit NAT 42218298 12238019 46
Packets Session Hit Slw 0 0 0
Packets Session FIN 664593 283296 1
Packets Dropped- SYN+ACKs 0 0 0
Packet, Transmit retries 0 0 0
SYN Packets routed (w/o conn) 115956 115143 0
Packets routed (w/o conn) 0 0 0
Packets routed (w/o conn), bad enc 0 0 0
Packets routed (w/o conn), FT 0 0 0
Packets with no SMAC, sent to slowpath 539 0 0
there are quite a lot of drops here.

CSM redundant bridged mode - alias IP required?

Hi! I am a little bit confused about the configuration guides concerning csm + fwsm
+ csm bridged mode. in my opinion when using bridged mode with the csm i do not really need any alias ip configuration - neither in the client vlan nor the server vlan. in bridged mode the csm does not route - thus i won't have any routes pointing to the csm. why are there always alias ip configurations in redundant bridged mode config guides? can somebody please clear that up for me? is there any other function of the alias IPs that I need them for?
Thanks,
Daniel

Daniel,
In general, if no router is present on a server-side VLAN, then each server's default route points to the aliased IP address. In the case of bridge mode, like you have, there is no need for the alias ip.
Regards
Pete..

Multiple "vserver" for different apps in a single VLAN (Bridge Mode)

Hi,
I'm deploying Cat6500 with CSM-S & FWSM modules. Doing bridge mode for the CSM (and FWSM will do the inter-VLAN routing upfront).
There are 3 (three) different applications (Vidiator, BEA & XIAM) placed in the Internet VLAN. Each application consist of multiple servers. Two applications (BEA & XIAM) need to be load-balanced, and the other one (Encoder) in the same VLAN does NOT need to be load-balanced.
The questions are:
- Is it possible to create multiple virtual servers (vserver) for different applications (BEA & XIAM) on the same VLAN client/server ?
- Is it also possible to do Load Balancing only for some Servers (BEA & XIAM) on one VLAN, while other servers (Encoder) on the same VLAN do NOT need load-balance? If, so what is the method? If not, what should be done?
Below is the script for CSM-S that I'm planning to deploy, please kindly provide your comments and advices.
Thanks a lot in advance.
Johan KC
MY SCRIPT:
module ContentSwitchingModule 9
vlan 96 client
ip address 10.67.96.9 255.255.252.0
alias 10.67.96.8 255.255.252.0
vlan 296 server
ip address 10.67.96.9 255.255.252.0
vserver BEA-PROXY-WEB
virtual 10.67.96.1 tcp www
vlan 96
server farm BEA-PROXY-SERVERS
replicate csrp connection
persistent rebalance
inservice
server farm BEA-PROXY-SERVERS
nat server
no nat client
real 10.67.96.2
inservice
real 10.67.96.5
inservice
probe ICMP
server farm XIAM-WEB-SERVERS
nat server
no nat client
real 10.67.96.26
inservice
real 10.67.96.29
inservice
probe ICMP
vserver XIAM-WEB
virtual 10.67.96.25 tcp www
vlan 96
server farm XIAM-WEB-SERVERS
replicate csrp connection
persistent rebalance
inservice

Hi Gilles,
Thanks a lot for your respond.
1. For the multiple vservers.
Both applications provide HTTP service but think that I could run them on different port number: 80 and 8080. Will this work?
2. About the non-loadbalancing apps (encoder).
There are two servers and future adding is possible. They can work independently of each other. Both servers just provide FTP access, for content provider to upload files.
Since both servers will run the same service (FTP) and port number, I don't think we can create two vservers for them, right?
You also said that I could have the server in the internet vlan and client accessing it directly. Is this mean that no vserver config needed? So, from FWSM the client traffic will go straight to the servers (without passing the CSM)?
If this is possible, sound like good option to me.
Please kindly provide your advice/comments.
Thanks again.
Best Regards,
Johan KC

Adding direct server access to CSM in bridge mode

I have a CSM that I have set up in bridge mode and want to allow direct management access to the real servers.
It looks like this. MSFC 10.1.100.1
CSM 10.1.100.3
Reals 10.1.100.10
10.1.100.20
10.1.100.25
Virtual 10.1.100.130
10.1.100.140
I tried to use the same method that I found for routed mode on CCO.
Serverfarm SERVER-SUBNET
No nat server
Predictor forward
Vserver DIRECT-ACCESS
Virtual 10.1.100.0 255.255.255.0 tcp any
Serverfarm SERVER-SUBNET
Inservice
The next step in the documentation says to add a static route to the CSM
Ip route 10.1.100.0 255.255.255.0 10.1.100.3
But this does not make since since the MSFC 10.1.100.1 address is already the default gateway.
So is there another way to configure bridge mode and enable direct management access?

After I thought about bridge mode again and took out the direct-access and server-subnet commands. I tested again and I can now directly access the servers.

Bridge mode CSM - Serverfarm with hosts in different vlans

Hi,
I'm trying to answer a question while doing design. I am planning on deploying a CSM in bridge mode with multiple vlans. I need to create a serverfarm which has real servers in two separate server side vlans.
I would then present the Vserver on the client side only of one of the vlans (I always like to specify where I want the vserver). Whe traffic comes in to this vserver, will the CSM appropriately switch traffic to both vservers? I think it will but don't have access to a csm right now to mock it up.
Thanks
Adam

You cannot have 3 vlans configured in bridge mode with all vlans using same address space.
You can use mixed mode to achieve your goal.
It is possible to have Vlan 10 and Vlan 11 in bridge mode and at the same time have VLAN 12 (for example) in the routed mode.
- Traffic from vlan 10 to vlan 20 is bridged
- Traffic from vlan 10 to vlan 12 is routed
where Vlan 10&20 belong to same subnet and Vlan 12 is in different subnet.
Syed

How to Configure Transparent caching on Cat 6500 with CSM in bridge mode?

hi.
I found How to Configure Transparent caching on Cat 6500 with CSM in routed mode.
But,
I need help How to Configure Transparent caching on Cat 6500 with CSM in bridge mode?
Please let me know sample configuration.
thanks.

Hi,
I wrote the document you mentioned and I also wrote the one below.
http://www.cisco.com/en/US/partner/products/hw/modules/ps2706/products_configuration_example09186a00802c1201.shtml
The one with the SSLM is a bridge mode config.
If you replace the SSLM with a cache [or a farm of caches] it would be a similar config.
Replace the SSL21 vserver with an HTTP vserver [most important is to keep the vlan configured on each vserver]
Regards,
Gilles.

CSM bridge vs router mode

Hi,
Can the CSM be used in both the bridge and router mode for different VLANS ? Or does it need to use all router mode and all bridged mode ?

you can have a mix of both.
Gilles.

CSM-S in bridge mode with more than one vlan.

I want to understand well how CSM works with more vlans in bridge mode?
Can a host in a vlan contact another server in vlan if I change the IP address?
Thanks for your help.
Andrea.

Hi,
Yes it can
Please look @ this documents:
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00800946e0.shtml
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00802c1201.shtml
If you find this post usefull
please don't forget to rate this
#Iwan Hoogendoorn

E4200 guest wireless redirect failure in Bridged Mode: cause & solution.

Background:
I have two E4200 v1 routers, both running the 1.0.04 firmware, both running in Bridged Mode.
On one, guest wireless redirect works perfectly: select the Network-guest SSID, open a browser and you get the Cisco login page, enter the passphrase and bingo, you're connected.
On the other unit, the redirect seems to fail. You are never presented with the login page and so, you are never connected.
After hours of mucking about, including some time on the phone with a very patient engineer, I believe I have stumbled on what's actually going on and possibly, what needs to be done to fix it.
The Problem
The firmware assumes that in Bridged Mode, DNS should come from the Gateway IP address.
The Fix
Linksys should include a field in Bridged Mode that allows you to specify an IP for the DNS server.
Diagnostics
To diagnose the problem, I used a Mac OS X machine.
The network is set up like this:
Router (not the E4200) is at 10.0.0.1
DNS server is at 10.0.0.2
E4200, Bridged Mode as a WAP, is at 10.0.0.253.
E4200's network settings are:
IP: 10.0.0.253
Subnet: 255.255.255.0
Gateway: 10.0.0.1
The problem is that the Linksys firmware assumes that DNS and the gateway are at the same IP. You will note that there is no place in the Bridged Mode settings to specify a DNS server IP address. You can prove this by doing the following:
1. Connect to the guest wireless.
2. In a Terminal window, type cat /etc/resolv.conf and press Enter. You'll see this:
nameserver 10.0.0.1
nameserver 192.168.33.1
This tells us that when you're on the guest network, your machine is looking for DNS results from 10.0.0.1. Except that on many networks, the gateway does not supply DNS. You can prove that DNS is working by typing this into a Terminal window:
dig yahoo.com
You should see a result similar to this:
; <<>> DiG 9.6-ESV-R4-P3 <<>> yahoo.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45182
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 13, ADDITIONAL: 13
;; QUESTION SECTION:
;yahoo.com.           IN   A
;; ANSWER SECTION:
yahoo.com.       3063   IN   A   209.191.122.70
yahoo.com.       3063   IN   A   72.30.38.140
yahoo.com.       3063   IN   A   98.139.183.24
;; AUTHORITY SECTION:
.           24651   IN   NS   a.root-servers.net.
.           24651   IN   NS   j.root-servers.net.
.           24651   IN   NS   l.root-servers.net.
.           24651   IN   NS   c.root-servers.net.
.           24651   IN   NS   e.root-servers.net.
.           24651   IN   NS   d.root-servers.net.
.           24651   IN   NS   f.root-servers.net.
.           24651   IN   NS   m.root-servers.net.
.           24651   IN   NS   g.root-servers.net.
.           24651   IN   NS   b.root-servers.net.
.           24651   IN   NS   i.root-servers.net.
.           24651   IN   NS   h.root-servers.net.
.           24651   IN   NS   k.root-servers.net.
;; ADDITIONAL SECTION:
a.root-servers.net.   24651   IN   A   198.41.0.4
b.root-servers.net.   24651   IN   A   192.228.79.201
c.root-servers.net.   24651   IN   A   192.33.4.12
d.root-servers.net.   24651   IN   A   128.8.10.90
e.root-servers.net.   24651   IN   A   192.203.230.10
f.root-servers.net.   24651   IN   A   192.5.5.241
g.root-servers.net.   24651   IN   A   192.112.36.4
h. root-servers.net.   24651   IN   A   128.63.2.53
i.root-servers.net.   24651   IN   A   192.36.148.17
j.root-servers.net.   24651   IN   A   192.58.128.30
k.root-servers.net.   24651   IN   A   193.0.14.129
l.root-servers.net.   24651   IN   A   199.7.83.42
m.root-servers.net.   24651   IN   A   202.12.27.33
;; Query time: 73 msec
;; SERVER: 10.0.0.1#53(10.0.0.1)
;; WHEN: Thu Apr 5 10:51:02 2012
;; MSG SIZE rcvd: 494
Note the section at the bottom that says ;; SERVER: 10.0.0.1#53(10.0.0.1). This tells you that the DNS query was answered by the DNS server at 10.0.0.1.
But in fact, if DNS is NOT served by your Gateway, you'll see this:
dig yahoo.com
; <<>> DiG 9.6-ESV-R4-P3 <<>> @10.0.0.1 yahoo.com
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached
Lucky:~ aball$
As a side note: the reason that the login page is never presented is most likely that the login page is only presented the first time that your Mac OS X machine connects to the network. Thereafter, the network is remembered and the WAP allows you access without a password. So, once you've connected a second time to the network, the WAP says "I know you" and lets you sail on through to wherever your browser is pointed, but then the browser, unable to find a DNS server, returns a blank page which appears to be a failure to present the login page but is, in fact, a DNS failure.
Hope someone finds this useful. And here's hoping that Linksys fixes this obvious issue with the firmware.

I do understand what you were trying to do here since you would like to have only 2 SSIDs (main & guest) for perhaps easy connectivity. The reason why you were not having problems getting online wirelessly when you were connected to the main network it’s because the computer was connected to only one DHCP server since the 2 bridge routers were just acting as a switch or a passthrough device. Now with guest network access it is a different scenario, a guest network is a virtual network meaning to say it’s like your having another router embedded on your router. Since it is a virtual network, then it does not follow the parameters of the main network, hence even if the router was set to bridge mode those routers will still have their own ip address of either 192.168.33.1 or 192.168.3.1.

CSM route mode and bridge mode can exist at the same time?

I'm using CSM on ver 4.x,and I used to the bridge mode for firewall load balance,for a new requset,I have to create a new server/client vlan,but the original firewall load balance was effected when I issued the server vlan command,and I'd like to use route mode for the new server farm,I'm wondering that route mode and brige mode can't exist at the same time,because it seems it doesn't make sense.Any reply will be very appreciated.

you can use bridge mode and route mode at the same time.
Traffic with desintation mac address being the CSM will be routed, otherwise it will be bridged.
Gilles.

ACE 4170 port redirection in Bridged mode

Hi Friends,
Is it possible to do port redirection on ACE while it is configured on Bridged Mode. For example. a user is accessing the Loadbalancer VIP on port 80 and this is redirected to port 8080 on backend servers?
I have attached a diagram for easier understanding. Is there a need to configure NAT in such cases?
Any help will be appreciated. Thanks in advance guys.

Hi,
if you want to allow ping to the VIP address, you only need to apply this command in your L3-4 policy map:
loadbalance vip icmp-reply
example:
policy-map multi-match L4-TEST-VIPS
class WWW-TEST
loadbalance vip inservice
loadbalance policy WWW_POLICY
loadbalance vip icmp-reply
more info can be found here:
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/v3.00_A2/configuration/slb/guide/classlb.html#wp1000929
If you want ICMP to pass through the ACE tp reach the real servers, you need to allow it in an ACL.
Hope this helps,
Dario

CSM Bridge Mode Vserver Redirect

Similar Messages

Maybe you are looking for