troubleshooting Question

Catalyst 3560 packet forwarding dependant on server IP and destination port

Avatar of Jon Winterburn
Jon WinterburnFlag for United Kingdom of Great Britain and Northern Ireland asked on
RoutersNetwork Operations
2 Comments1 Solution980 ViewsLast Modified:
Hi experts,

I hope the following makes sense, and that someone can help!

We have a Catalyst 3560 as our LAN default gateway with 2 VLANs:

VLAN 1 is 172.16.0.1/255.255.252.0
VLAN 2 is 99.99.99.245/255.255.255.0

We have two Cisco Pix's which traffic is forwarded to:

Pix 1 is 172.16.0.3 (ISP 1)
Pix 2 is 172.16.0.4 (ISP 2)

We have 2 Solaris servers which are on the 99.99.99.x VLAN, so they use 99.99.99.245 as their gateway:

Solaris server 1 is 99.99.99.9
Solaris server 2 is 99.99.99.10

 They run an application which connects to 3 different remote ADSL sites on three unique destination ports (9911, 9912, 9913) - but only one of the Solaris servers is ever on at any one time.

Currently, all packets through these ports go to these 3 sites via Pix 1. What I want to do is configure the Catalyst 3560 to interrogate the packets from both servers (ONLY from these servers, I don't wish to interrogate every packet from every device!) and then:

If outbound traffic from 99.99.99.9 is on port 9911, go to Pix 1 (172.16.0.3)
If outbound traffic from 99.99.99.10 is on port 9911, go to Pix 1 (172.16.0.3)

If outbound traffic from 99.99.99.9 is on port 9912, go to Pix 2 (172.16.0.4)
If outbound traffic from 99.99.99.10 is on port 9912, go to Pix 2 (172.16.0.4)

If outbound traffic from 99.99.99.9 is on port 9913, go to Pix 2 (172.16.0.4)
If outbound traffic from 99.99.99.10 is on port 9913, go to Pix 2 (172.16.0.4)

How can I achieve this on the C3560? And can I add the commands and remove them quickly without having to restart the switch?

Any help appreciated!
ASKER CERTIFIED SOLUTION
ck459

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 2 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 2 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros