Secure Router Mode Configuration, Vlan mode | Cisco Systems 6000

Configuration Examples

Secure (Router) Mode Configuration

In secure (router) mode, the client- and server-side VLANs are on different subnets. Figure 10 shows how the secure (router) mode configuration is set up.

Figure 10 Secure (Router) Mode Configuration

Note The addresses in Figure 10 refer to the steps in the following task table.

To configure Content Switching in secure (router) mode, perform this task:

	Command		Purpose

Step 1	Router(config)# vlan database		Enter the VLAN mode1.
Step 2	Router(vlan)# vlan 2		Configure a client-side VLAN2.
Step 3	Router(vlan)# vlan 3		Configure a server-side VLAN.
Step 4
	Router(vlan)# exit		Exit to have the configuration take effect.
Step 5
	Router(config)# ip slb vlan 2 client		Create the client-side VLAN 2 and enter the SLB
			VLAN mode.
Step 6
	Router(config-slb-vlan-client)# ip addr		Assign the CSM IP address on VLAN 2.
	192.158.38.10	255.255.255.0
Step 7
	Router(config-slb-vlan-client)# gateway		Define the client-side VLAN gateway to Router A.
	192.158.38.20
Step 8
	Router(config-slb-vlan-client)# gateway		Define the client-side VLAN gateway to Router B.
	192.158.38.21

		Catalyst 6000 Family Content Switching Module Installation and Configuration Note

	78-11631-02 Rev. A0			37
	78-11631-02 Rev. A0			37

Image 37

Cisco Systems 6000 manual Secure Router Mode Configuration, Create the client-side Vlan 2 and enter the SLB, Vlan mode

Contents

Contents Overview Describes the features of the CSM FeaturesThese sections describe the CSM Front Panel Description CSM front panel features are shown in FigureStatus LED RJ-45 Connector Operation ModeOff Red Orange Green Green to Orange Content Switching Module and Servers Client-to-CSM-to-Server Traffic Flow Client-to-Content Switching Module-to-Server Traffic Flow Safety Overview System Requirements CSM memory is not configurableMemory Requirements Hardware Supported Power RequirementsEnvironmental Requirements 72-876-01 Console Cable Not applicable Preparing to Install the CSM Installing the Content Switching ModuleRequired Tools Software Requirements Installing the CSM Power supply Installing Modules in the Catalyst 6000 Family Switch Verifying the Installation Verifying the Installation Accessing Online Help Using the Command-Line InterfaceUpgrading to a New Software Release Set up a session between the supervisor engine and the CSM Upgrading from the Supervisor Engine BootflashCSM upgrade 127.0.0.zz c6slb-apc.revision-num.bin Routerconfig# power cycle module slot-number CSM upgrade slot0 c6slb-apc.revision-num.bin Routerconfig# tftp-server slotxc6slb-apc.revision-num.binRouter config# power cycle module slot-number Upgrading from a Pcmcia Card Switchport Configuring the Content Switching ModuleSwitchport access vlan Router# vlan database Configuration Overview Configure the required parameters in the following sections Configuring VLANs See for the following notes Configuring VLANs Configuring Server-Side VLANs Configuring Client-Side VLANs Configuring Server Farms Configuring Real Servers Configuring Policies Configuring Maps Configure multiple cookies Configure multiple cookies into a cookie map Configuring Sticky Groups Configuring Virtual Servers Configuring Dynamic Feedback Protocol Configuring TCP Parameters Configuring Redirect Virtual Servers Configuring Client NAT Pools Configuring Server NAT Writing and Restoring Configurations Single Subnet Bridge Mode Configuration Configuration Examples Configure a client-side Vlan Enter the Vlan modeConfigure a server-side Vlan Exit to have the configuration take effect Vlan mode Secure Router Mode ConfigurationCreate the client-side Vlan 2 and enter the SLB Routerconfig# ip slb vlan 3 server Fault-Tolerant ConfigurationCreate the server-side Vlan 3 and enter the SLB Exit the submode Routerconfig# mac access-list extended Venus Router# configure terminalRouterconfig# int GigabitEthernet 2/1 Routerconfig-if#service-policy input Venus Configuration Parameter On Both Content Switching Modules Fault-tolerant configuration, the following rules apply Assign the Content Switching IP address on Create the client-side Vlan 2 and enter the SLB Vlan modeRouter B Hsrp address 192.158.38.10 Define Vlan 9 as a fault-tolerant Vlan Assign the default route for VlanCreate the Content Switching primary Configure a client-side VLAN2 Hsrp Configuration Overview Configuring Hsrp CSG Vlan Configure Switch 2-FT2 Hsrp secondary as follows Configure VLANs on Hsrp FT2 as follows Configuring CSM VLANs Configure EtherChannel on both switches as follows Configuring Probes for Health MonitoringAdd ports to the EtherChannel as follows Http creates an Http probe with a default configuration Probe-name is the name of the probe being configured it hasIcmp creates an Icmp probe with a default configuration Telnet creates a Telnet probe with a default configuration Http Probe Commands Available to all Probe Configurations Icmp Probe FTP, SMTP, and Telnet Probe TCP ProbeDNS Probe Submode Understanding RHI Configuring Route Health InjectionRHI Overview Routing to VIP Addresses With RHI Routing to VIP Addresses Without RHI Routerconfig# ip slb vserver vserver1 Configuring RHI for Virtual ServersUnderstanding How the CSM Determines VIP Availability Understanding Propagation of VIP Availability Information Safety Information Referral Warning Translated Safety WarningsRegulatory Standards Compliance Wrist Strap Warning Blank Faceplate Installation Requirement Warning Translated Safety Warnings Qualified Personnel Warning Related DocumentationRelease Notes for Catalyst 6000 Family IOS Software World Wide Web Obtaining DocumentationDocumentation CD-ROM Ordering Documentation To access Cisco.com, go to the following website Contacting TAC by Using the Cisco TAC WebsiteObtaining Technical Assistance Cisco.com Contacting TAC by Telephone Obtaining Technical Assistance