Ip Slb Allowaccess_All - Enterasys Matrix DFE-Gold Series Configuration Manual

Configuring Load Sharing Network Address Translation (LSNAT)
Example
This example shows how to allow clients at 10.24.16.12 through 10.24.16.42 non‐LSNAT access to
the virtual server named "virtual‐http":
Matrix>Router(config)#ip slb vserver virtual-http
Matrix>Router(config-slb-vserver)#allow accessservers 10.24.16.12 10.24.16.42

ip slb allowaccess_all

Use this command to allow all clients to directly access all services provided by real servers,
except for those services configured for server load balancing.
Syntax
ip slb allowaccess_all
no ip slb allowaccess_all
Parameters
None
Defaults
None.
Mode
Router command, Global configuration mode: Matrix>Router(config)#
Usage
The real servers are still protected from direct client access for configured services only. See
"Configuring Direct Access to Real Servers" on page 19‐3 for more information about using this
command in conjunction with the virtual server configuration mode command allow
accessservers.
The "no" form of this command removes direct access for all clients.
Examples
This example shows how to allow all clients to have direct access to real servers for all services
except those configured for server load balancing:
Matrix>Router(config)#ip slb allowaccess_all
This example shows how to configure both methods of direct access to real servers. The clients
identified with the allow accessservers command will have direct access to the real servers for all
services (including those configured for load‐balancing) and be blocked from using the virtual
server. All other clients will have direct access to real servers for all services except those
configured for server load balancing.
Matrix>Router(config)#ip slb allowaccess_all
Matrix>Router(config)#ip slb serverfarm httpserver
Matrix>Router(config-slb-sfarm)#real 10.1.2.1 port 80
Matrix>Router(config-slb-real)#inservice
Matrix>Router(config-slb-real)#exit
Matrix>Router(config-slb-sfarm)#real 10.1.2.3 port 80
19-28 LSNAT Configuration
ip slb allowaccess_all