Configuring Source Nat For Server-Originated Connections To The Vip - Cisco catalyst 6500 series Configuration Note

Appendix A Configuration Examples
real
-------------------------------------------------------------------------
10.20.220.10
10.20.220.20
10.20.220.30
Configuring Source NAT for Server-Originated Connections to
the VIP
This example shows a situation where servers open connections to the same VIP address that clients
access. Because servers are balanced back to themselves, source NAT is required. To set source NAT,
use the vlan parameter in the virtual server configuration to distinguish the VLAN where the connection
is originated. A different server farm is then used to handle server-originated connections. Souce NAT
is configured for that server farm. No source NAT is used for client-originated connections so that the
servers can log the real client IPs.
A very similar configuration needs be used any time that server-to-server load-balanced connections
Note
need to be supported with the source and destination servers located in the same VLAN.
module ContentSwitchingModule 5
vlan 220 server
ip address 10.20.220.2 255.255.255.0
alias 10.20.220.1 255.255.255.0
!
vlan 221 client
ip address 10.20.221.5 255.255.255.0
gateway 10.20.221.1
!
natpool POOL-1 10.20.220.99 10.20.220.99 netmask 255.255.255.0
!
serverfarm FARM
nat server
no nat client
real 10.20.220.10
inservice
real 10.20.220.20
inservice
real 10.20.220.30
inservice
!
serverfarm FARM2
nat server
nat client POOL-1
real 10.20.220.10
inservice
real 10.20.220.20
inservice
real 10.20.220.30
inservice
!
vserver FROM-CLIENTS
virtual 10.20.221.100 tcp telnet
vlan 221
serverfarm FARM
persistent rebalance
OL-4612-01

Configuring Source NAT for Server-Originated Connections to the VIP

server farm weight
WEBFARM 8
WEBFARM 8
WEBFARM 8
Catalyst 6500 Series Content Switching Module Configuration Note
state conns/hits
OPERATIONAL 0
PROBE_FAILED 0
OPERATIONAL 0
A-7