<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.3790.218" name=GENERATOR></HEAD>
<BODY><!-- Converted from text/plain format --><FONT face="Courier New"
color=#0000ff size=2>*My comments in blue or marked with '*'. You do have
alot of questions...I hope I can answer them somewhat clearly.</FONT><BR>
<P><FONT size=2><FONT face="Courier New">>Serveriron XL 16 Port. I will be
running an active-standby configuration (if I can understand how that works too!
:)).<BR><BR><FONT color=#0000ff>*The active standby config is very easy, search
the CLI docs for 'sym-priority'. It also works very well.
I strongly suggest that you do not download the operating code from the
site. Ask Foundry for a patch release that is right for
you.</FONT><BR><BR>><BR>>><BR>>> The inside source parameter
specifies that the mapping applies to the<BR>>> private address sending
traffic to the Internet.<BR>>><BR>><BR>>OK, I understand that. I
have just tried it and it works fine. Any traffic from the server to the
internet will use the IP address that I have assigned. However, what happens if
I want to go from the internet to the private address, for incoming SSH requests
for example?<BR><BR><FONT color=#0000ff>*It should work both ways. Just
ssh to the outside address. (from the outside of course). Make sure that
your real servers only possible route to the outside is through the
serveriron. You cannot use DSR in this
config.</FONT><BR><BR><BR>><BR>><BR>><BR>><BR>>><BR>>>
If you are running dual chassis devices in an active-active or<BR>>>
active-standby mode I would wait for the new code to be released<BR>>>
shortly. The new (shortly released) IronWare 9.2 code will
greatly<BR>>> simplify this. Instructions for the new configuration
are in the<BR>>> release notes for that
release.<BR>>><BR>><BR>>OK, Do you know when this will be, would you
recommend not using NAT in an active/standby configuration? What problems occur
if you do?<BR><BR><FONT color=#0000ff>*The new code release is not for the XL
series, sorry. I don't quite know how to configure this but it involves
creating VRRP-E interfaces for the static nat addresses. Hopefully the new
method in 9.2 will trickle into the XL code
line.<BR></FONT><BR><BR>><BR>>On a side note, in an active/standby
configuration. I have been reading that you should build the configuration on
one serveriron and then replicate it to the second serveriron (and using the
backup commands to configure the backup port) but how does that work if you have
virtual interfaces? I have a number of ve interfaces for each subnet, so do I
just copy the same configuration across? The documentation says that you need to
change the management address? I am unsure what this means!<BR><BR><FONT
color=#0000ff>*Your VEs will need vrrp-e interfaces. There are lots of
bugs in the config sync stuff...it's pretty brand new. I usually just tftp
the config off the 'active' SI, edit the ip addresses, vrrp-e priorities and the
sym-priorities and tftp it up to the 'standby'. One of the cool things
about the 'sym-priority' stuff is that you can have one SI active for virtual
server X and the other active for virtual Y. So you have them backing each
other up, but you're balancing load across the two XLs.
</FONT><BR><BR><BR>><BR>>Sorry if I am asking too many questions! Thanks
for all your help!<BR>><BR>>Kind regards<BR>>Tim.<BR>><BR>>>
-----Original Message-----<BR>>> From:
foundry-nsp-bounces@puck.nether.net<BR>>> [</FONT><A
href="mailto:foundry-nsp-bounces@puck.nether.net"><FONT
face="Courier New">mailto:foundry-nsp-bounces@puck.nether.net</FONT></A><FONT
face="Courier New">] On Behalf Of Timothy<BR>>> Arnold<BR>>> Sent:
Thursday, November 04, 2004 8:20 AM<BR>>> To:
foundry-nsp@puck.nether.net<BR>>> Subject: [f-nsp] Serveriron /
nat<BR>>><BR>>> Hi Foundry Guru's<BR>>><BR>>> I am
hoping someone could enlighten me on now network address<BR>>> translation
works in the serveriron. Here is the situation.<BR>>><BR>>> I have
two vlan's configured - the public vlan with routable IP<BR>>> addresses,
this is where the VIP addresses are. The second vlan is a<BR>>> standard
10.x netblock where the servers are located. I have a number<BR>>> of VIPs
and load balance a number of web servers - this works
great.<BR>>><BR>>> However, I have a management server that will be
accessible via web,<BR>>> ssh etc. Do I need to create a VIP address just
for this one server,<BR>>> or can I someway map a public IP address to the
internal IP address<BR>>> and vice versa?<BR>>><BR>>> I hope I
have made myself clear!<BR>>><BR>>> Thanks<BR>>> Tim.
:)<BR>>><BR>>>
_______________________________________________<BR>>> foundry-nsp mailing
list<BR>>> foundry-nsp@puck.nether.net<BR>>> </FONT><A
href="http://puck.nether.net/mailman/listinfo/foundry-nsp"><FONT
face="Courier New">http://puck.nether.net/mailman/listinfo/foundry-nsp</FONT></A><BR><FONT
face="Courier New">>><BR>>><BR>>><BR>><BR>><BR>><BR>>---<BR>>Timothy
Arnold<BR>>Technical Support Engineer<BR>>UK Solutions, Birmingham
Road<BR>>Studley, B80 7BG<BR>><BR>></FONT><A
href="http://www.uksolutions.co.uk"><FONT
face="Courier New">http://www.uksolutions.co.uk</FONT></A><BR><FONT
face="Courier New">><BR>>To contact support:<BR>>Via telephone: 08700
681 333<BR>>Via email:
support@uksolutions.co.uk<BR>><BR>></FONT></FONT><FONT face="Courier New">
</FONT></P></BODY></HTML>