Forum Discussion
Allwyn_Mascaren
Cirrus
CirrusLTM Websense loadbalancing VIP resets connection
The traffic flow for this connection is:
DMZ(on firewall) 10.0.0.0/24 range -> hits a IP 192.168.1.x ->
SRC NAT(outgoing interface of the fw) and DST NAT (to VIP:8080) ->
NO AUTO MAP, Persistenc...
The backend websense node just didnt have a route back to the fw's natted IP address and so it was never responding, once that was added the issue is solved now.
Simon_Blakely
Employee
EmployeeIt sounds to me that you have an asymmetric traffic path with a virtual that expects traffic to return through the LTM.
If you want to use an asymmetric traffic path, you need to use n-Path routing which requires a Performance Layer-4 virtual with a FastL4 profile implementing Loose Initiation/Loose Close
Alternatively, to use a Standard virtual, traffic must return to the LTM by using a SNAT/SNAT Automap configuration.