CSM access control

[alan.currie]

I have a basic CSM setup where 2 servers are load balanced accross a CSM. How would I disable anything other than established connections for going out of the servers through the CSM's? The servers are externally managed where incoming loadbalanced (through the CSM) connections are permitted but the 3rd party should be disabled from making outgoing connections from the servers.

[Gilles Dufour]

you could create a vserver with a vip 0.0.0.0/0, specify the server vlan with the 'vlan x' command and use a serverfarm with a fake real server with no mac-address so those connections should be dropped.

ACE has a 'drop' option which permit the same thing more easily.

Gilles.