ACE 4710 route mode with X-Forwarded-For

ctychan · ‎07-10-2010

Any config example for ACE4710 with below requirements

1. Route mode

2. X-Forwarded-For to add source client IP to http header

Sean Merrow · ‎07-12-2010

Here you go...

access-list ANYONE line 10 extended permit ip any any

probe tcp TCP

rserver host SERVER_01
ip address 192.168.1.11
inservice
rserver host SERVER_02
ip address 192.168.1.12
inservice
rserver host SERVER_03
ip address 192.168.1.13
inservice

serverfarm host REAL_SERVERS
probe TCP
rserver SERVER_01
    inservice
rserver SERVER_02
    inservice
rserver SERVER_03
    inservice

class-map match-all VIP-30
2 match virtual-address 172.16.51.30 tcp eq www

policy-map type loadbalance first-match SLB_LOGIC
class class-default
serverfarm REAL_SERVERS
insert-http X-Forwarded-For header-value "%is"

policy-map multi-match CLIENT_VIPS
class VIP-30
    loadbalance vip inservice
    loadbalance policy SLB_LOGIC
    loadbalance vip icmp-reply active

interface vlan 251
description Client vlan
ip address 172.16.51.11 255.255.255.0
access-group input ANYONE
service-policy input REMOTE_MGT
service-policy input CLIENT_VIPS
no shutdown
interface vlan 451
description Servers vlan
ip address 192.168.1.1 255.255.255.0
no shutdown

ip route 0.0.0.0 0.0.0.0 172.16.51.1

Hope that helps,

Sean