Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

CSS - Backend server with Multiple interfaces

Hi,

I am having setup with a single server with multiple interfaces common routing table configured in the same vlans behind the CSS.

CSS front end - 10.2.1.0/24

CSS back-end - 10.3.1.0/25

The server interfaces are in diferent vlan (10.5.1.0/24) to that of the  CSS and configured as the services in the CSS and defined group definition

for performing SNAT.

How does the CSS behave if the traffic to and from the server is comming from the different interfaces.

Thanks

Raj

1 REPLY
Bronze

Re: CSS - Backend server with Multiple interfaces

If I'm understanding your configuration correctly, traffic destined to a VIP on the CSS that contains services in the 10.5.1.0/24 VLAN would likely be routed back out the front-side of the CSS (or wherever the default route goes) if the CSS is not IP'd from the 10.5.1.0/24 subnet. Or, you can have a static route to the 10.5.1.0/24 subnet on the CSS to go out the backend interface.

Are you using 'add destination service' in your source group rule? If so, the CSS will NAT the client's address as whatever address you have specified in the group rule, and then send traffic to the service chosen for load balancing. The return traffic would then come back to the CSS, the NAT reverted, and then sent back to the client. Because of this, you'll never see the true client source IP on your server. Only the IP specified in the group rule.

If I am misunderstanding your config let me know.

James

250
Views
0
Helpful
1
Replies