How works the ICMP in 6500 CSM module?

[cjrchoi11]

It may dummy question but want to understand how the ICMP works in 6500 CSM module. what configuration required to be able to ping to the real server from client?

-client=1.1.1.0, has MSFC interface

-server=2.2.2.0, no MFSC interface

-6513 routing table=ip route 2.2.2.0 255.255.255.0 1.1.1.1

-->looks need the vserver with "any"(correct me if I'm worng) for the request traffic but how return the ICMP packet from the server.

!

vserver test

virtual 1.1.1.100 any

Thanks in advance,

[Gilles Dufour · Accepted solution]

in routing mode, the CSM will block traffic going directly to the servers.

To allow this traffic you need to create a serverfarm to ROUTE the traffic and associated this server farm to a catch-all vserver.

ie:

serverfarm ROUTE

predictor forward

no nat server

!

vserver catch-servers

virtual 1.1.1.0 /24 any

serverfarm route

inservice

!

The vserver should catch a subnet, not real host ip address.

The response from the server will be forwarded to the client because the ping request from the client will create/open the connection both ways.

Gilles.

[d.haeni]

Hello,

What's the answer for bridge mode? What's needed to ping directly from client to realserver and vice versa?

Your input is really appreciated.

/David

[Gilles Dufour]

David,

in bridge mode, if the client and server are in the same subnet, the client will send traffic directly to the server destination mac address and the CSM will bridge/forward the traffic.

Gilles.