Руководство Пользователя для Cisco Cisco Email Security Appliance C170

Скачать
Страница из 1181
 
38-12
User Guide for AsyncOS 9.8 for Cisco Email Security Appliances
 
Chapter 38      Advanced Network Configuration
  Direct Server Return
Configuring VLANs Using the Web Interface 
After a VLAN is created using the 
etherconfig
 command, you can configure it using the Network > 
Listeners page. 
Direct Server Return
Direct Server Return (DSR) is a way of providing support for a light-weight load balancing mechanism 
to load balance between multiple Email Security appliances sharing the same Virtual IP (VIP). 
DSR is implemented via an IP interface created on the “loopback” ethernet interface on the appliance.
Note
Configuring load balancing for Email Security appliances is beyond the scope of this document.
Enabling Direct Server Return
Enable DSR by enabling the “loopback” ethernet interface on each participating appliance. Next, create 
an IP interface on the loopback interface with a virtual IP (VIP) via the 
interfaceconfig
 command in 
the CLI or via the Network > Interfaces page in the GUI. Finally, create a listener on the new IP interface 
via the 
listenerconfig
 command in the CLI or via the Network > Listeners page in the GUI. Remember 
to commit all changes.
Note
Using the loopback interface prevents the appliance from issuing ARP replies for that specific interface.
When enabling DSR, the following rules apply:
All systems use the same Virtual IP (VIP) address
All systems must be on the same switch and subnet as the load balancer
2. InternalVLAN31 (10.10.31.10/24: mail31.example.com)
3. Management (10.10.0.10/24: example.com)
Choose the operation you want to perform:
- NEW - Create a new interface.
- EDIT - Modify an interface.
- GROUPS - Define interface groups.
- DELETE - Remove an interface.
[]>