F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

coda6_52611's avatar
coda6_52611
Icon for Nimbostratus rankNimbostratus
Aug 12, 2013

Load Balancing Cisco ACS 5.2

I was wondering if anyone is currently load balancing their Cisco ACS deplyment behind a BigIP LTM? I have a basic one-arm config setup to redirect TCP 49 and am using SNAT AutoMap to get the traffic...
availability
cisco
design
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Aug 12, 2013

I think that'll work only if you put the LTM in bridge mode between ACS and it's proper gateway. That way you can intercept and direct without manipulating L3. Radius works with one-arm because of UDP, but with tacacs being TCP-based, you'll break the 3-way handshake if you change the snat address to the source IP. Another option would be npath routing, but I doubt ACS supports it.