Real Servers not connected to ACE VLAN and Real Servers are clients accessing the VIP

Hi,
I have a very strange set up and need some help to get my config working
I have a ASA firewall with three VLANs
VLAN 1 = Internet
VLAN 2 = DMZ
VLAN 3 = Goes to ACE
On the ACE I have four VLANs
VLAN 3 = Goes to ASA
VALN 4 = Web Server Tier
VALN 5 = DB Tier
VALN 6 = VIPs
Our Application team have asked us to create a New VIP on the ACE with real servers in DMZ (Server A and Server B)
And they have told us that the cleints accessing the VIP will be Server A and Server B
I have always created VIPs with real servers directly connected to the ACE but not connected elsewhere.
I belive I have a big challenge of opening ports on the firewall etc to get this set up working. Also, should i use some sort of NAT / SNAT? 
Could anyone guide me on this setup please?
Raj

Hi Raj,
First of all it is possible to add servers in ACE which are HOP away from ACE interfaces. Here servers are HOP away but there VIP is part of ACE interface subnet. The only need is that servers return traffic towards client should be passed through ACE (so that ACE can manitain states and chage the source IP of the reply packet from server IP to VIP on which client has requested the connection).
When servers are HOP away and ACE do not come in path between server and client then we have to to do SNAT for intial client request. This configuration will force the return traffic from server to ACE (as server will NAT IP as client IP).
In your case DMZ-VIP which is created for two real servers A and B, will be accesses by these servers only. So it is a situation of server accessing there own VIP. For this scenario to work we have to have SNAT (no matter whether servers are directly connected or HOP away). So best solution here is VIP in VLAN 3, Rserevrs for this VIP in DMZ, and SNAT client request, using free IP in VLAN 3.
Also you have to open ports on firewall for both "real server Probes" and actual application ports, moreover policies modification on firewall for allowing traffic from DMZ to ACE VIP, DMZ to NAT IP and there vice versa traffic.

Similar Messages

  • My ipod touch has a usb cable picture with an arrow pointingto the itunes logo. the ipod will not connect to a computer and is unable to be turned off as there is no red power slider when the powerbutton is pressed. what can i do to fix this?

    my ipod touch has a usb cable picture with an arrow pointing to the itunes logo. the ipod will not connect to a computer and is unable to be turned off as there is no red power slider when the power button is pressed. what can i do to fix this?

    Try:
    - iOS: Not responding or does not turn on
    - Also try DFU mode after try recovery mode
    How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
    - If not successful and you can't fully turn the iOS device fully off, let the battery fully drain. After charging for an least an hour try the above again.
    - Try on another computer
    - If still not successful that usually indicates a hardware problem and an appointment at the Genius Bar of an Apple store is in order.
    Apple Retail Store - Genius Bar       

  • I am trying to move a pdf file onto my iPad2, and it says that the device is not connected or has stopped working.  But Windows 7 recognizes the device and I can see my pictures.  Same thing happens when I try to put music onto the iPad.

    I am trying to move a pdf file onto my iPad2, and it says that the device is not connected or has stopped working.  But Windows 7 recognizes the device and I can see my pictures.  Same thing happens when I try to put music onto the iPad.

    When in iTunes on the computer,my our ipadmshould show under devices.
    Click on your ipadmunder devices then go to music at top center of the iTunes window, check what you want to sync for music. You need to set it to a folder if I remember which would have your music in it you want synced.
    Same with PDF files.....there should be an option for data or even PDF files at the top center area of iTunes when the iPad is clicked under devices.
    If your iPad does not show or you cannot click on it under devices which is in the leftane of iTunes, the iPad is not being seen by the computer.
    Try unplugging the USB cord from the laptop then give it a few and see if the computer picks it up.

  • Bought a new Ipod touch and the WiFi does not connect.  Tried Reset and total Restore, does not connect to Router on DHCP, tried Static manually and still can not get it to connect even though it registers as connected.

    Bought a new Ipod touch and the WiFi does not connect.  Tried Reset and total Restore, does not connect to Router on DHCP, tried Static IP, Subnet, Router and DNS manually and still can not get it to connect even though it registers as connected.  Using Airport for router, latest firmware, no problems with Iphone 4 or Macbook Pro or any other internet devices.  After total Restore (factory settings) tried again, showed connected to router, but does not display "check" next to router but little rotating icon even though the wifi range signal shows connected at full strength and it says it is connected.  Just can't seem to get it to generate an IP.  Any solutions other than turning it on and off again?  Not a Merry Christmas morning.

    Ok, so, a couple of things:  Denisefromwaleska and I have the exact same size/type/color iPod.  Now wishing I'd bought the black one maybe...
    Second, Airport is an Express and I have a second one that I carry with me when I travel.  Tried to connect my Airport Express to the internet and could not although the iPod did recognize the router and tried to connect to the internet for some time, unlike my previous problem.  Updated firmware on my travel router, still could not connect to the internet.  Going to try to set up a manual Static IP on the travel router here in a few and conect through it although I predict the problem will persist. Back on the Christmas Present Airport Express router, it is back in play and working fine for all devices save the iPod. 
    Thanks again for all your help, hopefully I can get a solution in place soon,

  • I have an account for apple but this is not acceptable for i cloud. It say it is correct ID and password but this is not icloud account. So my phone can not connect with my computer and not synchronization too

    I have an account for apple but this is not acceptable for i cloud. It say it is correct ID and password but this is not icloud account. So my phone can not connect with my computer and not synchronization too. Last a few months i have not use this phone. Just i start to use again. So most probably i gave my old mail address as a ID or password. So how can i clearing this subject. regards

    ErolSinan wrote:
    ... there is no button for update between the About and Usage buttons in the General. ...
    Correct. That is only a feature of iOS 5 or later...
    ErolSinan wrote:
    ... yes my phone is 3G.
    then it can only go as far as iOS 4.2.1

  • I have bought  three iPhone 6  one for me and one each for my two kids  we have just done the update iOS 8.01 now all phone  do not connect to service provider and touch id is not working ,  APPLE HELP !!!!

    i phones  updated iso 8.01 all three phones  will not connect to service provider and touch id
    will not work  APPLE HELP !!!!!!!!!
    anyone know  i fix as  i have spent over 2000 pound on three phones that won't work
    all three where working fine until the 8.01 update

    Apple just pulled the update because it is a major fubar! You will have to rollback your iPhone to the base iOS 8 using iTunes and Apple needs to seriously test its patches!
    Update:
    Simply connect your phone to iTunes and back up your data. Then, click the “Restore iPhone” button and follow the on-screen instructions. It’s a huge pain, but at least it’s better than having your shiny new iPhone turned into a big expensive iPod touch.

  • My wireless all in one says it is not connected to my computer and yet it prints just fine. can't sc

    I cannot scan, the error message says I am not connected to a computer and yet I am able to print from my  computer.
    Why would it then be saying that I am not connected to my computer??

    What operating system? What router?
    Say thanks by clicking "Kudos" "thumbs up" in the post that helped you.
    I am employed by HP

  • When my iPod Touch is connected to my Mac, and I select Update to update the software of my iPod Touch, I get a message saying that my iTunes software is current, but it will not update my iPod Touch software.  Is there a bug in the iPod program?

    When my iPod Touch is connected to my Mac, and I select Update to update the software of my iPod Touch, I get a message saying that my iTunes software is current, but it will not update my iPod Touch software.  Is there a bug in the iPod program?

    If you have the first gen ipod touch as your information shows, then you would have to buy a software update:
    Purchasing iOS 3.1 Software Update for iPod touch (1st generation)

  • My daughters ipod 4th gen will no longer charge past 20% and will not connect to a pc in order to back everything up. the cable is working fine, otherwise it would not even charge to the 20%. i have tried the reset to not lose any data and no luck. help!

    my daughters ipod 4th gen will no longer charge past 20% and will not connect to a pc in order to back everything up. the cable is working fine, otherwise it would not even charge to the 20%. i have tried the reset to not lose any data and no luck, home+power for 10-15 seconds. I really would like to not lose everything she has, again, because I can't back it up this time. I have tried charging via a wall outlet and PC and both charge fine, just only to 20%. I am using the cable that came with it so no aftermarket issues there. Please help so I don't have to reset everything again.

    Because once it has charged enough to be powered on as soon as you turn it on it says battery is at 20% and will not charge anymore after that, it just runs for about 5-10 minutes before the battery dies again. The battery cycles discharge/recharge daily and its not on the charger at full charge for more than a couple hours and is never totally dead for more than a couple of hours.

  • I have my Time Machine on an external drive (not connected to Airport Extreme) and I have an external HD attached to airport extreme. Is it possible to have Time Machine backUp computer HD AND external HD connected to Airport Extreme. How?

    I have my Time Machine on an external drive (not connected to Airport Extreme) and I have an external HD attached to airport extreme. Is it possible to have Time Machine backUp computer HD AND external HD connected to Airport Extreme. How?

    Is it possible to have Time Machine backUp computer HD AND external HD connected to Airport Extreme.
    Sorry, but no.
    Time Machine will backup your Mac, but not the hard drive attached to the AirPort Extreme.
    Time Machine will back up a hard drive only if it is attached directly to your Mac via USB or FireWire.

  • Not Connecting to Wired Network and Forcing the loss of all Connections on the Home Network

    Just got a new G550 laptop  w/Win 7 OS. Tried to connect to wired router and got message "network cable not connected". Recycled laptop and router and came up with router connected to the laptop. Same message after search and identify steps finished. I then noticed I lost connection to the net/router with my other home networked units as well! Tried another cable, same results along with losing the entire home network connection. Disconnected the G550 from home network, via the cable, and the home network reconnected without any intervention. Tried another reboot directly connected to the cable modem, no go there either!
      I also rebooted with the wireless search shutoff and got the same problems as on the wired attempt. Thought it might have been the NIC card so I exchanged the system back at the store.  Sorry, same problem!! 

    I have a very similar problem... New Lenovo G550, running Vista Home Premium 64-bit. Right from the start it causes my TrendNet TEW-432BRP router to crash every 10 seconds. I bought a new DLink WBR-1310 and experience the same problem. Connecting to either router through either a wireless connection or a LAN cable connection causes the router to crash every 10 seconds. The router crashes, reboots, establishes a connection with the laptop, communication starts and then the router crashes again.
    I am looking for help.

  • I just recently downloaded iTunes and whenever I try to access the store It says "iTunes could not connect to the iTunes Store. An unknown error occurred (0x80096004)

    I just recently downloaded iTunes and whenever I try to access the store It says "iTunes could not connect to the iTunes Store. An unknown error occurred (0x80096004). I have windows xp and it's running on service pack 2. I have downloaded and redownloaded iTunes many times. I'm getting very frustrated!  Please help!

    I have the same error for Windows Vista.  I read all the community posts and followed the suggested fixes including numerous uninstalls and installs, clearing cache, choosing various SSL TL options, turning off all spyware and nothing has worked.  My internet works fine for all my other programs so not sure what is going on with Itunes.  I will not buy anymore products through
    Apple Itunes.

  • I have a Panasonic camcorder PV-GS65 and I used to be able to connect to my iMac and my machine would automatically recognize the camera, rewind the tape, and start the import process as soon as I turned the device on and it was connected.  not anymore

    I have a Panasonic camcorder PV-GS65 and I used to be able to connect to my iMac and my machine would automatically recognize the camera, rewind the tape, and start the import process as soon as I turned the device on and it was connected.  Now my iMac does not even see my device
    Any suggestions?

    You cannot install the apps on the car.
    The cars head unit is merely acting as an interface to the apps on the device.
    If you want to use those apps in the car, plug the device in and leave it plugged in.

  • HT4199 my wifi is not connected on my iphone and when i try to connect it does not recognise my password

    my wifi is not connected on my iphone and when i try to connect it does not recognise my password

    Disabled
    Place the iOS device in Recovery Mode and then connect to your computer and restore via iTunes. The iPod will be erased.
    iOS: Wrong passcode results in red disabled screen                         
    If recovery mode does not work try DFU mode.                        
    How to put iPod touch / iPhone into DFU mode « Karthik's scribblings        
    For how to restore:
    iTunes: Restoring iOS software
    To restore from backup see:
    iOS: Back up and restore your iOS device with iCloud or iTunes       
    If you restore from iCloud backup the apps will be automatically downloaded. If you restore from iTunes backup the apps and music have to be in the iTunes library since synced media like apps and music are not included in the backup of the iOS device that iTunes makes.
    You can redownload most iTunes purchases by:
    Downloading past purchases from the App Store, iBookstore, and iTunes Store        
    If problem what happens or does not happen and when in the instructions? When you successfully get the iPod in recovery mode and connect to computer iTunes should say it found an iPod in recovery mode.

  • I just bought an Apple TV and I'm trying to connect airplay but the icon does not appear! My iPhone and Apple TV are on the same wifi connection but the airplay button does not apper?

    I just bought an Apple TV and I'm trying to connect airplay but the icon does not appear! My iPhone and Apple TV are on the same wifi connection but the airplay button does not apper? The same thing with my iPad mini

    Try restarting all devices including portable  iOS ones and your router.
    Check Airplay is not disabled in AppleTVs settings.
    AC

Maybe you are looking for