I have two servers that I need to load-balance smtp, http, ssl. I need to do this with two VIP's. The first one is from the outside and the second one is to the inside from the DMZ. Here is the topology.<br><br>Internet ---> outside subnet where VIP and two reals sit.
<br><br>then on the same SIXL I need another vip for dmz to inside<br><br>DMZ ( where VIP is) ----> to inside where reals are.<br><br>Here is what I have so for which is not working, I have the real server default GW for the Z network pointing to ve 20.
<br><br>server real owa1 z.z.z.248<br> port http<br> port ssl<br> port ssl keepalive<br> port smtp<br> port smtp keepalive<br>!<br>server real owa2 z.z.z.249<br> port http<br> port ssl<br> port ssl keepalive<br> port smtp
<br> port smtp keepalive<br><br>!<br>server real owa1-inside x.x.x.100<br> port http<br> port ssl<br> port ssl keepalive<br> port smtp<br> port smtp keepalive<br><br>!<br>server real owa2-inside x.x.x.101<br> port http<br>
port ssl<br> port ssl keepalive<br> port smtp<br> port smtp keepalive<br><br>!<br>!<br>server virtual owa z.z.z.200<br> predictor least-conn<br> port ssl sticky<br> port ssl keep-alive<br> port http sticky<br> port http keep-alive
<br> port smtp sticky concurrent<br> port smtp keep-alive<br> bind ssl owa2 ssl owa1 ssl<br> bind http owa1 http owa2 http<br> bind smtp owa1 smtp owa2 smtp<br>!<br>server virtual owa-inside y.y.y.100<br> port smtp sticky concurrent
<br> port smtp keep-alive<br> port http sticky<br> port http keep-alive<br> port ssl sticky<br> port ssl keep-alive<br> bind smtp owa1-inside smtp owa2-inside smtp<br> bind http owa1-inside http owa2-inside http<br> bind ssl owa1-inside ssl owa2-inside ssl
<br> <br>vlan2 by port<br>untagged ethe 1 to 8<br>no spanning-tree<br> router-interface ve 2<br>!<br>vlan 30 by port<br> untagged ethe 9 to 16<br> no spanning-tree<br> router-interface ve 20<br>!<br><br>interface e 1
<br> speed-duplex 100-full<br>!<br>interface e 2<br> speed-duplex 100-full<br>!<br>interface e 3<br> speed-duplex 100-full<br>!<br>interface e 4<br> speed-duplex 100-full<br>!<br>interface e 5<br> speed-duplex 100-full<br>
!<br>interface e 6<br> speed-duplex 100-full<br>!<br>interface e 7<br> speed-duplex 100-full<br>!<br>interface e 8<br> speed-duplex 100-full<br>!<br>interface e 9<br> speed-duplex 100-full<br>!<br>interface e 10<br> speed-duplex 100-full
<br>!<br>interface e 11<br> speed-duplex 100-full<br>!<br>interface e 12<br> speed-duplex 100-full<br>!<br>interface e 13<br> speed-duplex 100-full<br>!<br>interface e 14<br> speed-duplex 100-full<br>!<br>interface e 15<br>
speed-duplex 100-full<br>!<br>interface e 16<br> speed-duplex 100-full<br>!<br>!<br>interface ve 2<br> ip address y.y.y.101 subnet<br>!<br>!<br>!<br>!<br>!<br>!<br>!<br>!<br>!<br>!<br>!<br>!<br>!<br>!<br>!<br>!<br>!<br>!
<br>interface ve 20<br> ip address z.z.z.254 subnet<br>!<br>