For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

coda6_52611's avatar
coda6_52611
Icon for Nimbostratus rankNimbostratus
Aug 12, 2013

Load Balancing Cisco ACS 5.2

I was wondering if anyone is currently load balancing their Cisco ACS deplyment behind a BigIP LTM? I have a basic one-arm config setup to redirect TCP 49 and am using SNAT AutoMap to get the traffic...
availability
cisco
design
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Aug 12, 2013

I think that'll work only if you put the LTM in bridge mode between ACS and it's proper gateway. That way you can intercept and direct without manipulating L3. Radius works with one-arm because of UDP, but with tacacs being TCP-based, you'll break the 3-way handshake if you change the snat address to the source IP. Another option would be npath routing, but I doubt ACS supports it.