Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

CSS11506 'group' configuration

Can someone explain to me the way that 'add service' and 'add destination service' commands work when groups are configured. The config guide wasn't too clear on this point assuming a wider knowledge of this subject I think. We have 3 content rules configured and 6 services. No ACLs. 3 groups configured to handle NAT from the content rules to the services using the content rule VIP address as the address for the group. We are using 'add destination service' command to point at groups of back-end servers.

Any light shed on this subject would be most appreciated.

Thanks.

Steve.

2 REPLIES
New Member

Re: CSS11506 'group' configuration

Steve,

The add service command is used when you want to NAT the source ip when the servers initiate connection to the outside of CSS.

The add destination command is usually used in a one armed config ( For eg . When the CSS and the servers are hanging from the same CAT switch). It NATS the source ip of the client and makes sure that the servers reply back to the CSS.

Let me know if this helps.

Sagar

New Member

Re: CSS11506 'group' configuration

Hi Sagar,

That would make sense as the CSS and servers are hanging off the same 6500 Cats.

Thanks, that has clarified things for me.

Steve.

133
Views
5
Helpful
2
Replies