Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

CSM module: rserver to rserver (or VIP) connections between serverfarms

Hello,

I am trying to audit an existing configuration of CSM module.

Unfortunately have not an experience in CSM module configaration.

The main goal is to understand if there are any direct connection between servers

in different serverfarms (i.e. server from one serfarm opens session to server in

second serverfarm to VIP or to real IP). Also I need to know if there exist any

server initiated connection.

For serverfarms in CSM configuration there are two options configured

1)

nat server

nat client <pool>

2)

nat server

no nat client

As I understand, if there is no "static nat" lines in CSM configuration it means that

there can not be server initiated connections. Is this correct?

What is the best way to check if there are any direct connections between different serverfarms?

Is it enough to take an output of "show conn" command like

    prot vlan source                destination           state      

----------------------------------------------------------------------

In  UDP  149  10.13.205.20:57944    10.36.22.20:23235     ESTAB      

Out UDP  449  10.36.22.24:23235     10.13.205.20:57944    ESTAB      

and check if there is "In" connection from <source IP> in one serverfarm to <destination IP>

in second serverfarm? As for now I did not see such connections.

Will be presented direct server-server/VIP or server initiated connections in "sh conn" command

output for CSM module?

Could you advise me how to check this in CSM configuration or show commands output?

Thank you in advance.

Everyone's tags (4)
1 REPLY
Bronze

CSM module: rserver to rserver (or VIP) connections between serv

If the vserver to vserver connection is made between devices in the same subnet and the client uses the vsever address (rather than a vip address) then this will not be seen via the CSM at all. If the client vserver targets the vip address, then it is probable that you will require source nat to make it work. If a vserver starts a connection to another vserver addess (not vip) in a different subnet and the connection flows via the CSM,  then the CSM will show this in its connection table. You can test this via "telnet " and check the connection table. Any working vserver to vip connections will be visible in the connection table. Matthew

596
Views
0
Helpful
1
Replies