allow accessservers Configuring Load Sharing Network Address Translation (LSNAT)
Enterasys Matrix DFE-Gold Series Configuration Guide 19-27
Thisexampleshowshowtousestickysessionpersistence,inconjunctionwiththestickyserver
farmparameter.
Matrix>Router(config)#ip slb serverfarm lsnat
Matrix>Router(config-slb-sfarm)#sticky
Matrix>Router(config-slb-sfarm)#real 10.1.2.10 port 80
Matrix>Router(config-slb-real)#inservice
Matrix>Router(config-slb-real)#exit
Matrix>Router(config-slb-sfarm)#real 10.1.2.11 port 80
Matrix>Router(config-slb-real)#inservice
Matrix>Router(config-slb-real)#exit
Matrix>Router(config-slb-sfarm)#exit
Matrix>Router(config)#ip slb vserver virtual-lsnat
Matrix>Router(config-slb-vserver)#serverfarm lsnat
Matrix>Router(config-slb-vserver)#virtual 10.1.4.5 tcp 0
Matrix>Router(config-slb-vserver)#persistence level sticky
Matrix>Router(config-slb-vserver)#inservice
allow accessservers
Usethiscommandtoallowspecificclientstoaccesstheloadbalancingrealserversinaparticular
LSNATserverfarmwithoutaddresstranslation.
Syntax
allowaccessserversclient‐ip‐startclient‐ip‐end
noallowaccessserversclient‐ip‐startclient‐ip‐end
Parameters
Defaults
None.
Mode
Routercommand,SLBVirtualServerConfigurationmode:Matrix>Router(config‐slb‐vserver)#
Usage
Specifiedclientscansetupconnectionsdirectlytotherealservers’IPaddresses,aswellastothe
virtualserverIPaddress(VIP).Formoreinformationaboutusingthiscommand,see
“ConfiguringDirectAccesstoRealServers”onpage 19‐3.
The“no”formofthiscommandremovesnon‐LSNATaccess
permissionfromthespecifiedclients.
client‐ip‐start SpecifiesanIPaddressatthestartoftherangeofclientstobeallowed
access.
client‐ip‐end SpecifiesanIPaddressattheendoftherangeofclientstobeallowed
access.
