cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
392
Views
0
Helpful
1
Replies

Verification of Transparent cache configuration

syjeon
Level 1
Level 1

I would like to load balancing a web cache server.

whenever a client connect to http, the traffic reached a MSFC,

the MSFC check dst:0.0.0.0:80, and then forwarding to ACE?

the flow right? It just check only a http to redirect cache!

So I made a configuration like below.

------------------------------------------------

access-list anyone line 10 extended permit ip any any

access-list anyone line 20 extended permit igmp any any

access-list anyone line 30 extended permit icmp any any

access-list anyone line 40 extended permit pim any any

rserver host Cache_1

ip address 192.168.2.10

inservice

rserver host Cache_2

ip address 192.168.2.11

serverfarm host CACHES

transparent

predictor hash url

rserver linux1

inservice

rserver linux1-24

inservice

!

class-map match-all VIP-TCP80

2 match virtual-address 0.0.0.0 0.0.0.0 tcp eq www

class-map type management match-any remote_access

2 match protocol telnet any

3 match protocol icmp any

4 match protocol http any

5 match protocol https any

policy-map type loadbalance first-match SF-CACHES

class class-default

serverfarm CACHES

policy-map multi-match SLB-CACHES

class VIP-TCP80

loadbalance vip inservice

loadbalance policy SF-CACHES

interface vlan 20

description From_Client

ip address 192.168.1.2 255.255.255.0

access-group input anyone

access-group input PERMIT-ANY

service-policy input remote_mgmt_allow

service-policy input SLB-CACHES

no shutdown

inter vlan 30

description From_Server

ip address 192.168.2.1 255.255.255.0

service-policy input remote_mgmt_allow

no shutdown

1 Accepted Solution

Accepted Solutions

Gilles Dufour
Cisco Employee
Cisco Employee

this looks good to me.

Except you should configure an access-group input on interface vlan 30 to allow traffic from the cache.

Gilles.

View solution in original post

1 Reply 1

Gilles Dufour
Cisco Employee
Cisco Employee

this looks good to me.

Except you should configure an access-group input on interface vlan 30 to allow traffic from the cache.

Gilles.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: