Enterasys Matrix DFE-Gold Series

Configuring Load Sharing Network Address Translation (LSNAT) ip slb allowaccess_all
19-28 LSNAT Configuration
Example
Thisexampleshowshowtoallowclientsat10.24.16.12through10.24.16.42non‐LSNATaccessto
thevirtualservernamed“virtual‐http”:
Matrix>Router(config)#ip slb vserver virtual-http
Matrix>Router(config-slb-vserver)#allow accessservers 10.24.16.12 10.24.16.42
ip slb allowaccess_all
Usethiscommandtoallowallclientstodirectlyaccessallservicesprovidedbyrealservers,
exceptforthoseservicesconfiguredforserverloadbalancing.
Syntax
ip slb allowaccess_all
no ip slb allowaccess_all
Parameters
None
Defaults
None.
Mode
Routercommand,Globalconfigurationmode:Matrix>Router(config)#
Usage
Therealserversarestillprotectedfromdirectclientaccessforconfiguredservicesonly.See
“ConfiguringDirectAccesstoRealServers”onpage 19‐3for moreinformationaboutusingthis
commandinconjunctionwiththevirtualserverconfigurationmodecommandallow
accessservers.
The“no”formofthiscommandremoves
directaccessforallclients.
Examples
Thisexampleshowshowtoallowallclientstohavedirectaccesstorealserversforallservices
exceptthoseconfiguredforserverloadbalancing:
Matrix>Router(config)#ip slb allowaccess_all
Thisexampleshowshowtoconfigurebothmethodsofdirectaccesstorealservers.Theclients
identifiedwiththeallowaccessserverscommandwillhavedirectaccesstotherealserversforall
services(includingthoseconfiguredforload‐balancing)andbeblockedfromusingthevirtual
server.Allotherclientswill
havedirectaccesstorealserversforallservicesexceptthose
configuredforserverloadbalancing.
Matrix>Router(config)#ip slb allowaccess_all
Matrix>Router(config)#ip slb serverfarm httpserver
Matrix>Router(config-slb-sfarm)#real 10.1.2.1 port 80
Matrix>Router(config-slb-real)#inservice
Matrix>Router(config-slb-real)#exit
Matrix>Router(config-slb-sfarm)#real 10.1.2.3 port 80