Does anyone have a simple example of a Cisco ACE (6500 blade or 4710) configuration for one-armed load balancing with SNAT? I have a load balancer in one data center that I want to LB for servers/services in another.

I found the following article: Source NAT on Cisco ACE, but this is a little more complicated than my situation.

Something like:

  • ACE: & ACE VIP:
  • Server1: & Server2:
  • Client:

For example:
Client goes to, gets SNAT'd as and the request then load-balanced to Servers 1 & 2. The servers replies would then return to the ACE before being forwarded to the client.

I realize this could result, at times, in inefficient routing so if there are better ways of doing this I would appreciate any suggestions.


One slight modification to the stated goal is that the SNAT comes out of the pool - instead of the ACE's own IP address.

probe icmp ping
  interval 15
  passdetect interval 60

rserver host testserver
  ip address
  probe ping
rserver host testserver2
  ip address
  probe ping

serverfarm host onearm
  predictor leastconns
  rserver testserver
  rserver testserver2

class-map match-any vip
  2 match virtual-address any

policy-map type loadbalance first-match farm-testfarm
  class class-default
policy-map type loadbalance first-match pmOneArm
  class class-default
    serverfarm onearm

policy-map multi-match vipOneArm
  class vip
    loadbalance vip inservice
    loadbalance policy pmOneArm
    loadbalance vip icmp-reply active
    loadbalance vip advertise active
    nat dynamic 10 vlan 15

interface vlan 15
  ip address
  fragment chain 112
  no icmp-guard
  access-group output ALL
  nat-pool 10 netmask pat
  service-policy input vipOneArm
  no shutdown

Check out this link, should be what you're looking for :


Good luck

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.