Extreme Networks Px Series - Manual (Page 75)

Px Series Application Switch Installation and Configuration Guide 6-17
Configuration Example
When you configure half-NAT mode, you can also configure gateway mode for the
application switch. Gateway mode specifies an IP address that a server’s default
gateway can forward to, as if the application switch were another router. The
application switch can then switch the forwarded traffic to another router, even one on
another VLAN.
To enable and configure gateway mode on the application switch, use the following
commands:
enable gateway-mode
config gateway-mode add ip <ip address> [vlan <vlan tag>]
If VLAN tags are enabled, you must specify the VLAN tag for gateway mode.
If gateway mode is enabled, set up a policy rule on the server’s default gateway to
forward to the gateway-mode IP address of the application switch. For example:
config source-flow <name> next-hop <gateway-mode ip>
Configuration Example
In the configuration example, yourdomain.com needs to get around the mega proxy
problem, but does not have time to rewrite much of their site. Instead, they move to
using learned cookies for the main web servers. They also add two SSL servers for
secure web transactions, and configure SSL session persistence. Because they want to
gather more information about who their users are, they also move to server-only NAT
mode.