logging enable
logging standby
logging timestamp
logging buffered 7
no logging message 111008
no logging message 111009



access-list ACL_SERVERS_NAT line 8 extended permit ip any host 10.18.25.231
access-list ACL_SERVERS_NAT line 16 extended permit ip any host 10.18.25.232
access-list ALLOW_ALL line 1 extended permit ip any any



rserver host TESTSERVER01
  ip address 10.18.25.231
  conn-limit max 2000000 min 1500000
  inservice
rserver host TESTSERVER02
  ip address 10.18.25.232
  conn-limit max 2000000 min 1500000
  inservice

ssl-proxy service SSL_CLIENT

serverfarm host SF_WEBSERVERS
  rserver TESTSERVER01
    conn-limit max 2000000 min 1500000
    inservice
  rserver TESTSERVER02
    conn-limit max 2000000 min 1500000
    inservice

class-map match-any CM_NAT_FROM_SERVER
  2 match source-address 10.18.25.231 255.255.255.255
  3 match source-address 10.18.25.232 255.255.255.255
class-map type management match-any REMOTE_ACCESS
  2 match protocol icmp any
class-map match-any TESTFTP_CLASS
  2 match virtual-address 10.13.3.79 tcp any

policy-map type management first-match REMOTE_MGMT_ALLOW_POLICY
  class REMOTE_ACCESS
    permit

policy-map type loadbalance first-match PM_FM_FTPSERVER
  class class-default
    serverfarm SF_WEBSERVERS

policy-map multi-match L4_VIP
  class TESTFTP_CLASS
    loadbalance vip inservice
    loadbalance policy PM_FM_FTPSERVER
    loadbalance vip icmp-reply active
    loadbalance vip advertise active
    nat dynamic 1 vlan 1136

interface vlan 1136
  description client side
  ip address 10.18.25.253 255.255.255.240
  alias 10.18.25.254 255.255.255.240
  peer ip address 10.18.25.252 255.255.255.240
  no normalization
  no icmp-guard
  access-group input ALLOW_ALL
  access-group output ALLOW_ALL
  nat-pool 1 10.18.25.247 10.18.25.247 netmask 255.255.255.240 pat
  service-policy input REMOTE_MGMT_ALLOW_POLICY
  service-policy input L4_VIP
  no shutdown

ip route 0.0.0.0 0.0.0.0 10.18.25.243