×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

CSS - Policy routing

Unanswered Question
Apr 21st, 2008
User Badges:

I have a requirement for the servers behind my CSS to access the internet. Currently I have ecmp enabled with two default routes specified. Is there anyway I can specify that when the servers initiate traffic out to the internet, that they only use a single specified default route vs load sharing across the two default routes currently defined?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Gilles Dufour Mon, 04/21/2008 - 23:04
User Badges:
  • Cisco Employee,

you can create a service with your prefered default gateway ip address and then use an acl to catch the server initiated connection and use the option 'prefer ' to force the traffic to go in that direction.

Make sure to configure the service as transparent to avoid nating the destination ip address.


Gilles

ccanning Wed, 04/23/2008 - 11:26
User Badges:

Gille,

Just to clarify, that I understood correctly. I also need to created a source group so that all servers appear as a single ip (see config below)


!

service server1

ip add 172.16.1.10

!

service server2

ip add 172.16.1.11

!

group all-servers

vip address 10.0.0.100

add service server1

add service server2

active

!

service def-gwy-server

ip address 10.0.0.1

type transparent-cache

!

!

acl 2

clause 10 permit any any destination any source-group all-servers prefer def-gwy-server

clause 15 permit any any destination any


Gilles Dufour Thu, 04/24/2008 - 03:51
User Badges:
  • Cisco Employee,

correct.

Except that if you define the service under the group, you do not need to use the source-group option in the acl.


Gilles.

Actions

This Discussion