Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSS 11500 Source groups add destination.


Can somebody explain to me the function of source groups and the add destination service? And example would be good. As i understand source groups are used when a server behind the content switch initiates a flow. The source address is replaced by the vip specified in the group. I would like to know what the add destination does? Change the destination address?

Kind regards,

Frederik De Muyter.

Cisco Employee

Re: CSS 11500 Source groups add destination.


the source group always nats the source ip address.

However, there is 2 scenarii possible.

1/ the server opens the connection.

In this case you need 'add service ...'

2/ a connection is open to the server.

In this case you need 'add destination service'.

When do we need this 2nd option ?

When for example you want to guarantee that the response from the server goes back through the CSS and not directly to the client.

In this case, you need the client ip when forwarding the traffic to the server.


New Member

Re: CSS 11500 Source groups add destination.

hi giles,

need your expertise explanation..

i'm opting for option 1, but do i need to create a new service (meaning any connection from the server will be allowed) like below ?

service server1

ip add

protocol tcp

or i can add the existing service configured, which only restrict to http only?

service server1_80

ip add

protocol tcp

port 80

thanks in advance..

Cisco Employee

Re: CSS 11500 Source groups add destination.

you can use the existing service.

The group will only look at the ip address anyway.