Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

ACE: design/config question: trans.slb + slb + mngt

Hi,

Could this ACE setup/design work?

I want PROXIED sessions (to VIP proxy 10.0.0.10) to be loadbalanced

All other sessions (eg. Some public ip's) will have to transparent loadbalanced to proxy servers. Thus not destinations NAT

ACE is inline between firewalls and proxy servers.

Vip definitions:

class-map match-all P_PXYVIP_VS_LB

2 match virtual-address 10.0.0.10 255.255.255.255 tcp 8080

class-map match-all P_PXYTRANS_VS_LB

2 match virtual-address 0.0.0.0 0.0.0.0 tcp any

Question in this case: would it still be possible to have management sessions towards proxy servers routed by the ACE ? (physical ip addresses of proxy)

Probably the classmap PXYTRANS is catching those sessies also.

Are there other design/config solutions to solve this one?

Thank you!

Wim

1 REPLY
New Member

Re: ACE: design/config question: trans.slb + slb + mngt

Let me repose the question:

How could one still be able to access the realserver IP (which is directly connected

to the ACE) for manangement.

Knowing that there is 1 VIP which (normal) loadbalance to the realservers

and

there is 1 VIP 0.0.0.0 tcp any which is configure to catch all other traffic to be

transparant loadbalanced.

The VIP 0.0.0.0 is always catching the sessions which need only to be routed

to the real servers ip.

121
Views
0
Helpful
1
Replies
CreatePlease to create content