Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

Bronze

ACE rserver with weight 0

Hi there,

I have both CSM's and ACE in my environment, and on my CSMs I can configure a serverfarm with real servers that have a weight of 0.  The purpose for this is to allow outbound connections from any server in the farm to use the VIP address as the source IP, but only allow inbound connections to one server.    Is there a way to configure something similar on the ACE?  I found that the rserver weight must be between 1-100 on the ACE, so that seems to be out. 

Any help would be appreciated.

Thanks,

Brandon

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

ACE rserver with weight 0

It is much easier in ACE.

Define a class map which is matching your server ip or server subnet

class-map match-any realserver

  2 match source-address 10.10.50.50 255.255.255.255   (This represent as host you can even match a subnet )

So you can see we are not even involving the serverfarm here.

Under multimatch policy

class servers

    nat dynamic 1 vlan 346

Under vlan interface

nat-pool 1 10.10.70.11 10.10.70.11 netmask 255.255.255.255 pat  ( Here IP address is one of the VIP addres

That's All you need to do.

Hope that helps.

regards,

Ajay Kumar

2 REPLIES
Cisco Employee

ACE rserver with weight 0

It is much easier in ACE.

Define a class map which is matching your server ip or server subnet

class-map match-any realserver

  2 match source-address 10.10.50.50 255.255.255.255   (This represent as host you can even match a subnet )

So you can see we are not even involving the serverfarm here.

Under multimatch policy

class servers

    nat dynamic 1 vlan 346

Under vlan interface

nat-pool 1 10.10.70.11 10.10.70.11 netmask 255.255.255.255 pat  ( Here IP address is one of the VIP addres

That's All you need to do.

Hope that helps.

regards,

Ajay Kumar

Bronze

ACE rserver with weight 0

Hi Ajay,

Thanks for the response. That did the trick!  Thanks again!

307
Views
0
Helpful
2
Replies
CreatePlease to create content