Руководство Пользователя для Cisco Cisco Email Security Appliance C170

DSR is implemented via an IP interface created on the “loopback” ethernet 
interface on the IronPort appliance.

Configuring load balancing for IronPort appliances is beyond the scope of this 
document.

Enable DSR by enabling the “loopback” ethernet interface on each participating 
appliance. Next, create an IP interface on the loopback interface with a virtual IP 
(VIP) via the 

interfaceconfig

 command in the CLI or via the Network -> 

Interfaces page in the GUI. Finally, create a listener on the new IP interface via 
the 

listenerconfig

 command in the CLI or via the Network -> Listeners page in 

the GUI. Remember to commit all changes.

Using the loopback interface prevents the appliance from issuing ARP replies for 
that specific interface.

When enabling DSR, the following rules apply:

All systems use the same Virtual IP (VIP) address

All systems must be on the same switch and subnet as the load balancer