Specifications

LSNAT Configuration Example
September 8, 2010 Page 16 of 28
LSNAT Configuration Example
ThissectionprovidesanenterpriseLSNATconfigurationexamplethatincludesfiveserverfarms.
Theseserverfarmscanbelogicallythoughtofaseitherproduct‐basedorenterpriseinternalserver
farms.Theproduct‐basedserverfarmsare accessibletothegeneralpublic.Theenterpriseinternal
serverfarmsareaccessibleonlytoenterprise
employees.ThemyproductHTTPandFTPserver
farmsprovidetheproduct‐basedservices.ThemyinternalHTTP,FTP,and SMTPserverfarms
provideenterpriseinternalservices.
Product-Based and Enterprise Internal Domains
TheHTTPandFTPdomainsprovidingpublicaccesstotheproduct‐basedserverfarmsare:
• www.myproduct.com
•ftp.myproduct.com
TheHTTP,FTP,andSMTPdomainsprovidingemployeeaccesstotheenterpriseinternalserver
farmsare:
• www.myinternal.com
• ftp.myinternal.com
•smtp.myinternal.com
Server Farms
Forboththepublicproduct‐basedandenterpriseinternalserverfarms,theenterpriseITclients
willhavedirectaccesstotheserverswithoutanyaddresstranslationrequired.Allotherclients
thathaveaccessrightstotheseserverfarmswillbeaddresstranslated.
Product-Based HTTP Server Farm
Theproduct‐basedHTTPserverfarm,realserverandvirtualserverconfigurationwill:
•HandleHTTPrequestsfromthegeneralpublicusingthewww.myproduct.comdomain.
•LoadbalanceHTTPservicesacrossthethreerealserversassociatedwith
www.myproduct.com,usingtheweightedroundrobinselectionprocesswith a ratioof3:2:2.
Theweightedround
robinselectionprocesstakesintoaccounttheresourcedifferences
betweenthethreeservers.
•UseApplicationContentVerificationTCPfailuredetection.
•UsetheVIP194.56.12.2port80.
Product-Based FTP Server Farm
Theproduct‐basedFTPserverfarm,realserverandvirtualserverconfigurationwill:
•HandleFTPrequestsfromthegeneralpublicusingtheftp.myproduct.comdomain.
•LoadbalanceFTPservicesusingtheleastconnectionspredictoracrosstworealservers.
•UsebothpingandTCPapplicationfailuredetection.
•UsetheVIP194.56.12.2port21.