Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Basic CSS Functionality Questions


I have a CSS 11501 loaner on the way from Cisco, but was hoping to ask a few questions ahead of time. I am relatively new to this, so bear with me.

I have three offices connected via a VPN between two pix devices. Local users and anonymous web traffic all funnels through the remote office. I am hoping I can incorporate a CSS box to direct traffic (via a VPN to another pix) to a third office in the event the www server at the main office is not reachable, but return to the first office when it is back online.

I am a little confused by VIP. Right now, my domain name resolves to an IP address on the outside of my pix which NATs and sends the request on to my web server. If the CSS is behind it, do I create a VIP that maps to the actual IP of the www server, and have the pix send traffic to the VIP?

I have read the PDFs found online, but am still a little foggy.



Cisco Employee

Re: Basic CSS Functionality Questions

the Pix will have to send the traffic to the VIP.

The VIP should be an address existing only on the CSS and that the rest of your network knows how to reach.

The CSS will then nat to the real server ip.


New Member

Re: Basic CSS Functionality Questions


I will give that a try, and will be back with more questions I am sure. Thanks again.