login timeout 0

access-list anyone line 10 extended permit ip any any 
access-list anyone line 11 extended permit icmp any any 
access-list test_nat_acl line 10 extended permit tcp host 10.13.1.180 eq https any 


probe icmp PING
  interval 5
  faildetect 30


rserver host test1
  ip address 10.13.2.181
  probe PING
  inservice

serverfarm host test-https-farm
  rserver test1
    inservice

class-map match-any test-https-class
  3 match virtual-address 10.13.1.180 tcp eq https
class-map match-any test_nat_class
  2 match access-list test_nat_acl

policy-map type loadbalance first-match test-https-lbpolicy
  class class-default
    serverfarm test-https-farm

policy-map multi-match test_https_policy
  class test-https-class
    loadbalance vip inservice
    loadbalance policy test-https-lbpolicy
    loadbalance vip icmp-reply active
    loadbalance vip advertise
policy-map multi-match test_nat_policy
  class test_nat_class
    nat static 123.456.251.180 netmask 255.255.255.255 443 vlan 251

interface vlan 251
  description NAT with the big wide world.
  ip address 123.456.251.162 255.255.255.0
  alias 123.456.251.161 255.255.255.0
  peer ip address 123.456.251.163 255.255.255.0
  access-group input anyone
  no shutdown
interface vlan 300
  description Client side
  ip address 10.13.1.162 255.255.255.0
  alias 10.13.1.161 255.255.255.0
  peer ip address 10.13.1.163 255.255.255.0
  access-group input anyone
  service-policy input test_https_policy
  service-policy input test_nat_policy
  no shutdown
interface vlan 302
  description Server side.
  ip address 10.13.2.162 255.255.255.0
  alias 10.13.2.161 255.255.255.0
  peer ip address 10.13.2.163 255.255.255.0
  access-group input anyone
  no shutdown

ip route 0.0.0.0 0.0.0.0 10.13.1.1