Technical data

ServerIron ADX NAT64 Configuration Guide 129
53-1002444-02
IP NAT redundancy
7
DRAFT: BROCADE CONFIDENTIAL
Configuring Static NAT redundancy in Sym-Active (Active-Active) mode:
The Sym-Active (Active-Active) mode is available for IP NAT in router code, and it is configured in
combination with VRRP-E. Also, IP NAT is VIP group-aware and requires NAT port pools to be
configured in the VIP group, which is then tied to the VRRP-E configuration. Follow these steps to
enable the minimum required configuration for static NAT in Sym-Active mode, as shown in
Figure 25.
FIGURE 25 Minimum required configuration for static NAT in Sym-Active setup
1. On both ServerIron ADX units, place the untagged sync-link in a separate VLAN and disable
STP:
ServerIronADX(config)# vlan 99 by port
ServerIronADX(config-vlan-99)# untagged ethernet 1/12
ServerIronADX(config-vlan-99)# static-mac-address 00e0.52ee.6900 ethernet 1/12
ServerIronADX(config-vlan-99)# no spanning-tree
Placing the sync-link in a separate VLAN prevents unnecessary traffic from going over the
sync-link. With HA, you cannot have spanning-tree configured anywhere on any link connected
between the two ServerIron ADX units. The static-mac-address command is configured with the
MAC address of the interface at the other end of the sync-link.
2. Configure the server active-active-port command on both ServerIron ADX units, along with and
any connected router-ports. Also enable VRRP-E on the ServerIron ADX:
ServerIronADX(config)# server active-active-port ethernet 1/12 vlan-id 99
ServerIronADX(config)# server router-ports ethernet 1/1
ServerIronADX(config)# router vrrp-extended
Gateway
VE:
10.10.20.1
Switch
ServerIron ADX A
Outside: 10.20.1.2
Inside: 10.10.1.2
ServerIron ADX B
Outside: 10.20.1.4
Inside: 10.10.1.4
Remote Server
60.60.60.60
1/12
1/1
1/1
1/2
1/2
1/12
PC
10.10.1.100
PC
10.10.1.101
Server
10.10.1.102
Server
10.10.1.103