Cisco Systems 6000 manual Secure Router Mode Configuration, Vlan mode

Page 37

Configuration Examples

Secure (Router) Mode Configuration

In secure (router) mode, the client- and server-side VLANs are on different subnets. Figure 10 shows how the secure (router) mode configuration is set up.

Figure 10 Secure (Router) Mode Configuration

Note The addresses in Figure 10 refer to the steps in the following task table.

To configure Content Switching in secure (router) mode, perform this task:

	Command		Purpose

Step 1	Router(config)# vlan database		Enter the VLAN mode1.
Step 2	Router(vlan)# vlan 2		Configure a client-side VLAN2.
Step 3	Router(vlan)# vlan 3		Configure a server-side VLAN.
Step 4
	Router(vlan)# exit		Exit to have the configuration take effect.
Step 5
	Router(config)# ip slb vlan 2 client		Create the client-side VLAN 2 and enter the SLB
			VLAN mode.
Step 6
	Router(config-slb-vlan-client)# ip addr		Assign the CSM IP address on VLAN 2.
	192.158.38.10	255.255.255.0
Step 7
	Router(config-slb-vlan-client)# gateway		Define the client-side VLAN gateway to Router A.
	192.158.38.20
Step 8
	Router(config-slb-vlan-client)# gateway		Define the client-side VLAN gateway to Router B.
	192.158.38.21

		Catalyst 6000 Family Content Switching Module Installation and Configuration Note

	78-11631-02 Rev. A0			37
	78-11631-02 Rev. A0			37

Image 37

Contents Contents Overview Describes the features of the CSM FeaturesThese sections describe the CSM Front Panel Description CSM front panel features are shown in FigureStatus LED RJ-45 Connector Operation ModeOff Red Orange Green Green to Orange Content Switching Module and Servers Client-to-CSM-to-Server Traffic Flow Client-to-Content Switching Module-to-Server Traffic FlowSafety Overview System Requirements CSM memory is not configurableMemory Requirements Hardware Supported Power RequirementsEnvironmental Requirements 72-876-01 Console Cable Not applicablePreparing to Install the CSM Installing the Content Switching ModuleRequired Tools Software RequirementsInstalling the CSM Power supply Installing Modules in the Catalyst 6000 Family Switch Verifying the Installation Verifying the InstallationAccessing Online Help Using the Command-Line InterfaceUpgrading to a New Software Release Set up a session between the supervisor engine and the CSM Upgrading from the Supervisor Engine BootflashCSM upgrade 127.0.0.zz c6slb-apc.revision-num.bin Routerconfig# power cycle module slot-numberCSM upgrade slot0 c6slb-apc.revision-num.bin Routerconfig# tftp-server slotxc6slb-apc.revision-num.binRouter config# power cycle module slot-number Upgrading from a Pcmcia CardSwitchport Configuring the Content Switching ModuleSwitchport access vlan Router# vlan databaseConfiguration Overview Configure the required parameters in the following sections Configuring VLANsSee for the following notes Configuring VLANsConfiguring Server-Side VLANs Configuring Client-Side VLANsConfiguring Server Farms Configuring Real Servers Configuring Policies Configuring Maps Configure multiple cookies Configure multiple cookies into a cookie mapConfiguring Sticky Groups Configuring Virtual Servers Configuring Dynamic Feedback Protocol Configuring TCP ParametersConfiguring Redirect Virtual Servers Configuring Client NAT Pools Configuring Server NAT Writing and Restoring ConfigurationsSingle Subnet Bridge Mode Configuration Configuration ExamplesConfigure a client-side Vlan Enter the Vlan modeConfigure a server-side Vlan Exit to have the configuration take effectVlan mode Secure Router Mode ConfigurationCreate the client-side Vlan 2 and enter the SLB Routerconfig# ip slb vlan 3 server Fault-Tolerant ConfigurationCreate the server-side Vlan 3 and enter the SLB Exit the submodeRouterconfig# mac access-list extended Venus Router# configure terminalRouterconfig# int GigabitEthernet 2/1 Routerconfig-if#service-policy input VenusConfiguration Parameter On Both Content Switching Modules Fault-tolerant configuration, the following rules applyAssign the Content Switching IP address on Create the client-side Vlan 2 and enter the SLB Vlan modeRouter B Hsrp address 192.158.38.10Define Vlan 9 as a fault-tolerant Vlan Assign the default route for VlanCreate the Content Switching primary Configure a client-side VLAN2Hsrp Configuration Overview Configuring HsrpCSG Vlan Configure Switch 2-FT2 Hsrp secondary as followsConfigure VLANs on Hsrp FT2 as follows Configuring CSM VLANsConfigure EtherChannel on both switches as follows Configuring Probes for Health MonitoringAdd ports to the EtherChannel as follows Http creates an Http probe with a default configuration Probe-name is the name of the probe being configured it hasIcmp creates an Icmp probe with a default configuration Telnet creates a Telnet probe with a default configurationHttp Probe Commands Available to all Probe ConfigurationsIcmp Probe FTP, SMTP, and Telnet Probe TCP ProbeDNS Probe Submode Understanding RHI Configuring Route Health InjectionRHI Overview Routing to VIP Addresses With RHI Routing to VIP Addresses Without RHIRouterconfig# ip slb vserver vserver1 Configuring RHI for Virtual ServersUnderstanding How the CSM Determines VIP Availability Understanding Propagation of VIP Availability InformationSafety Information Referral Warning Translated Safety WarningsRegulatory Standards Compliance Wrist Strap Warning Blank Faceplate Installation Requirement Warning Translated Safety Warnings Qualified Personnel Warning Related DocumentationRelease Notes for Catalyst 6000 Family IOS Software World Wide Web Obtaining DocumentationDocumentation CD-ROM Ordering DocumentationTo access Cisco.com, go to the following website Contacting TAC by Using the Cisco TAC WebsiteObtaining Technical Assistance Cisco.comContacting TAC by Telephone Obtaining Technical Assistance