Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSS - unable to connect to destination servers in same subnet

I have a frontend subnet (has the VIP's) and backend subnet (contains the physical servers)

VIP Address for WEB service is (in the frontend subnet)

The destinations are, 71, 72 (on the backend subnet)

The source server is

External servers can connect to fine and see the traffic as from that ip only.

However when the source server IP is in the same subnet as the destination servers is unable to connect to the VIP.

It will send the initial syn packet to, but recieves back a packet from the IP of the destination servers (ie, 71, 72)

Because this packet doesn't match the original request it fails to connect.

I tried adding a Group with the VIP and same destination service - but this forces all connections to the destination services to look like they are coming from the VIP Address of, I want the services to see it coming from the original ip only.

group WEB

vip address

add destination service WEB-01

add destination service WEB-02

add destination service WEB-03

New Member

Re: CSS - unable to connect to destination servers in same subne

I don't known CSS but I think it may be a NAT issue. Try to NAT the source server.

Hope this help.


Cisco Employee

Re: CSS - unable to connect to destination servers in same subne

you can creat an acl to apply the group only to those devices who need to be nated.

group WEB

vip address


acl 1

clause 10 permit any host destination content

clause 99 permit any any destination any

apply circuit-VLANXXX


CreatePlease login to create content