Lsnat Configuration Task List And Commands - Enterasys Matrix 2G4072-52 Configuration Manual

IP Configuration Command Set
Configuring Load Sharing Network Address Translation (LSNAT)
If you also want to provide direct client access to real servers configured as part of a server farm
group, there are two mechanisms that can provide direct client access.
The first mechanism, configured within virtual server configuration mode with the allow
accessservers command, allows you to identify specific clients who can set up connections directly
to a real server's IP address, as well as continue to use the virtual server IP address.
The second mechanism, configured in Global configuration mode with the ip slb allowaccess_all
command, allows all clients to directly access all services provided by real servers EXCEPT FOR
those services configured to be accessed by means of a configured virtual server. The real servers
are still protected from direct client access for configured services only. For example, using this
mechanism, if you configured a load balancing server group containing "realserver1" and
"realserver2" to provide HTTP service through virtual server "vserver-http," clients can only access
the HTTP service on those real servers by means of the "vserver-http" virtual server. However,
clients can directly access "realserver1" and "realserver2" for any services other than HTTP.
If you combine the two mechanisms, that is, configure ip slb allowaccess_all at the Global
configuration mode and also configure allow accessservers within a virtual server's configuration
mode, the clients identified with the allow accessservers command will have direct access to the
real servers for all services (including those provided by a virtual server) and be blocked from using
the virtual server. So for example, an "allowed" client can access "realserver1" and "realserver2"
directly for all services, including HTTP, but cannot access those servers for HTTP by means of the
"vserver-http" virtual server.

LSNAT Configuration Task List and Commands

Table 12-8 lists the mandatory and optional tasks and commands for configuring LSNAT on the
Matrix Series device. Commands are described in the associated sections as shown.
Table 12-8 LSNAT Configuration Task List and Commands
Task
Configure a server farm:
•
(Optional) Display the server farm
configuration.
•
(Optional) Define an FTP control port.
•
Specify a server farm name.
•
Specify a real server as a member of the server
farm.
12-72 Matrix DFE-Platinum and Diamond Series Configuration Guide
Use these commands...
show ip slb serverfarms
ip slb ftpctrlport (Section
ip slb serverfarm (Section
real (Section 12.2.8.4)
(Section 12.2.8.1)
12.2.8.2)
12.2.8.3)