I am working on getting our ServerIron XL setup to support multiple VLANs w/ DSR. Everything works with the configuration posted below but does not give me access to the management IP unless I supply another untagged port access to my management network. I find it hard to believe the management IP cannot be accessed via a VLAN that is provided on the tagged port. I tried both using the default-vlan and non-defualt-vlan. The management network is on VLAN ID 1.
ver 07.4.01T12 global-protocol-vlan ! ! server source-ip 10.0.0.11 255.255.255.0 10.0.0.1 server source-ip 10.1.0.11 255.255.255.0 10.1.0.1 ! ! ! ! server real server-1 10.0.0.190 port http port http url "HEAD /" port ssl ! server real server-2 10.0.0.191 port http port http url "HEAD /" port ssl ! server real server-3 10.1.0.190 port http port http url "HEAD /" port ssl ! server real server-4 10.1.0.191 port http port http url "HEAD /" port ssl ! server virtual vserver-1 10.0.0.163 sym-priority 254 predictor least-conn port ssl no port ssl sticky port ssl dsr port http port http dsr bind ssl server-1 ssl server-2 ssl bind http server-1 http server-2 http ! server virtual vserver-2 11.0.0.163 sym-priority 254 predictor least-conn port ssl no port ssl sticky port ssl dsr port http port http dsr bind ssl server-3 ssl server-4 ssl bind http server-3 http server-4 http ! ! vlan 200 name DEFAULT-VLAN by port ! vlan 4 by port tagged ethe 1 ip-subnet 10.0.0.0 255.255.255.0 ! vlan 2 by port tagged ethe 1 ip-subnet 10.1.0.0 255.255.255.0 ! vlan 1 by port tagged ethe 1 ip-subnet 10.2.0.0 255.255.255.0 ! default-vlan-id 200 ip address 10.2.0.22 255.255.255.0 ip default-gateway 10.2.0.1 Cal
_______________________________________________ foundry-nsp mailing list [email protected] http://puck.nether.net/mailman/listinfo/foundry-nsp
