HP (Hewlett-Packard) MSM7XX Switch User Manual


 
Working with public access attributes
Colubris AV-Pair attribute - Site values
This keyword can be defined directly on the service controller or in the service controller
RADIUS profile.
Syntax
dnat-server=listname,hostname,port[,hostname2,port2]
Where:
Parameter Description
listname
Specify the name of an access list definition that has its action set to
DNAT-SERVER.
hostname
Specify the IP address or domain name of the primary server to which
traffic will be redirected. Maximum length is 253 characters. If polling is
not enabled, traffic is always sent to this server, even if it is down.
port
Specify the port on the primary server to which traffic will be redirected.
Range: 1 to 65535.
hostname2
Specify the IP address or domain name of the secondary server to which
traffic will be redirected. Maximum length is 253 characters. Traffic will
only be sent to the secondary server if polling is enabled and the primary
server is down. See Multiple DNAT servers on page 9-61.
port2
Specify the port on the secondary server to which traffic will be redirected.
Range: 1 to 65535.
Example
The following creates an access list called redirect which is used to redirect HTTP traffic for
authenticated users to server1.mycompany.com on port 8080.
The following entry is added to the local profile for the service controller:
access-list=redirect,DNAT-SERVER,tcp,all,80
dnat-server=redirect,srv1.mycompany.com,8080
Multiple DNAT servers
The dnat-server keyword supports the definition of two external servers. To make use of
these servers a polling mechanism is provided. Two keywords are available to activate and
configure the polling mechanism.
Syntax
primary-dnat-server-status-url=listname,URL_of_page
secondary-dnat-server-status-url=listname,URL_of_page
9-61