Cisco Cisco Email Security Appliance C160 ユーザーガイド
Chapter 7 Advanced Network Configuration
7-468
Cisco IronPort AsyncOS 7.3 for Email Advanced Configuration Guide
OL-23081-01
DSR is implemented via an IP interface created on the “loopback” ethernet
interface on the Cisco IronPort appliance.
interface on the Cisco IronPort appliance.
Note
Configuring load balancing for Cisco IronPort appliances is beyond the scope of
this document.
this document.
Enabling Direct Server Return
Enable DSR by enabling the “loopback” ethernet interface on each participating
appliance. Next, create an IP interface on the loopback interface with a virtual IP
(VIP) via the
appliance. Next, create an IP interface on the loopback interface with a virtual IP
(VIP) via the
interfaceconfig
command in the CLI or via the Network ->
Interfaces page in the GUI. Finally, create a listener on the new IP interface via
the
the
listenerconfig
command in the CLI or via the Network -> Listeners page in
the GUI. Remember to commit all changes.
Note
Using the loopback interface prevents the appliance from issuing ARP replies for
that specific interface.
that specific interface.
When enabling DSR, the following rules apply:
–
All systems use the same Virtual IP (VIP) address
–
All systems must be on the same switch and subnet as the load balancer