maximum-number

Maximum number of IOS SLB RADIUS and GTP sticky subscribers that can be assigned to an individual virtual server:

• If the radius calling-station-idkeyword is specified in the sticky command for the virtual server (that is, if the virtual server is configured to create the IOS SLB RADIUS calling-station-ID sticky database), a sticky subscriber is an entry in the IOS SLB RADIUS calling-station-ID sticky database.
• If the radius framed-ipkeyword is specified in the sticky command for the virtual server (that is, if the virtual server is configured to create the IOS SLB RADIUS framed-IP sticky database), a sticky subscriber is an entry in the IOS SLB RADIUS framed-IP sticky database.
• If the radius usernamekeyword is specified in the sticky command for the virtual server (that is, if the virtual server is configured to create the IOS SLB RADIUS username sticky database), a sticky subscriber is an entry in the IOS SLB RADIUS username sticky database.
• If both the radius framed-ip and radius calling-station-idkeywords are specified in the sticky command for the virtual server, a sticky subscriber is an entry in the IOS SLB RADIUS calling-station-ID sticky database.
• If both the radius framed-ip and radius username keywords are specified in the sticky command for the virtual server, a sticky subscriber is an entry in the IOS SLB RADIUS username sticky database.

By default, there is no limit on the number of IOS SLB RADIUS and GTP sticky subscribers that can be assigned to an individual virtual server.

12.1(11b)E

This command was introduced.

12.1(12c)E

This command was modified to support RADIUS load balancing for CDMA2000, a third-generation (3-G) version of Code Division Multiple Access (CDMA).

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb route

Enables IOS SLB to inspect packets for RADIUS framed-IP sticky routing.

show ip slb sticky

Displays the IOS SLB sticky database.

maximum-number

Maximum number of simultaneous active datagram connections using the firewall farm. Valid values range from 1 to 4294967295. The default is 4294967295.

12.1(3a)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

protocol datagram

Enters firewall farm datagram protocol configuration mode.

show ip slb firewallfarm

Displays information about the firewall farm configuration.

show ip slb reals

Displays information about the real servers.

maximum-number

Maximum number of simultaneous active TCP connections using the firewall farm. Valid values range from 1 to 4294967295. The default is 4294967295.

12.1(3a)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

protocol tcp

Enters firewall farm TCP protocol configuration mode.

show ip slb firewallfarm

Displays information about the firewall farm configuration.

show ip slb reals

Displays information about the real servers.

maximum-number

Maximum number of simultaneous active connections on the real server. Valid values range from 1 to 4294967295. The default is 4294967295.

sticky-override

(Optional) Allow sticky load balancing to exceed maximum-numberfor this real server.

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.

12.2

This command was integrated into Cisco IOS Release 12.2.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.1(18)E

The sticky-override keyword was added.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

real (server farm)

Identifies a real server by IP address and optional port number as a member of a server farm and enters real server configuration mode.

show ip slb reals

Displays information about the real servers.

show ip slb severfarms

Displays information about the server farm configuration.

time

Idle time, in milliseconds, before a flow is aged. The valid range is 1 milliseconds to 10000 milliseconds. The default setting is 2000 milliseconds.

12.1(8)E

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb firewallfarm

Identifies a firewall farm and initiates firewall farm configuration mode.

ip slb serverfarm

Associates a real server farm with a virtual server.

ip slb vserver

Identifies a virtual server.

mls aging slb process

Controls how often the aging process runs.

time

Aging process interval, in milliseconds. The valid range is 1 millisecond to 10000 milliseconds. The default setting is 2000 seconds.

12.1(8)E

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb firewallfarm

Identifies a firewall farm and initiates firewall farm configuration mode.

ip slb serverfarm

Associates a real server farm with a virtual server.

ip slb vserver

Identifies a virtual server.

mls aging slb normal

Configures the aging time for flows.

12.2(1)SX

This command was introduced.

12.2(33)SRD2

The command was modified so that the default command no longer appears in the generated configuration.

12.2(33)SXI2

The command was modified so that the default command no longer appears in the generated configuration.

12.2(18)SXF17

The command was modified so that the default command no longer appears in the generated configuration.

wildcard

IOS SLB wildcard searches are to be performed by the Policy Feature Card (PFC). This value is the default setting.

pfc

(Optional) IOS SLB wildcard searches are to be performed by the Policy Feature Card (PFC). This value is the default setting.

rp

(Optional) IOS SLB wildcard searches are to be performed by the route processor.

icmp

Disables ICMP handling by IOS SLB. (Pings to IOS SLB virtual IP addresses are still answered.) Use this command to reduce CPU usage when IOS SLB is configured in locations with a high volume of ICMP flows, such as in the network core.

12.1(7)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb firewallfarm

Identifies a firewall by IP address farm and enters firewall farm configuration mode.

ip slb serverfarm

Associates a real server farm with a virtual server.

ip slb vserver

Identifies a virtual server.

client pool

Configures the client address in load-balanced packets using addresses from the client address pool. The pool name must match the pool argument from a previous ip slb natpoolcommand.

This mode is commonly referred to as directed client NAT , or simply client NAT.

server

Configures the destination address in load-balanced packets sent to the real server as the address of the real server chosen by the server farm load-balancing algorithm.

This mode is commonly referred to as directed server NAT , or simply server NAT.

12.1(1)E

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.

12.2

This command was integrated into Cisco IOS Release 12.2.

12.1(2)E

The client keyword and pool argument were added.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb serverfarm

Associates a real server farm with a virtual server.

real (server farm)

Identifies a real server by IP address and optional port number as a member of a server farm and enters real server configuration mode.

show ip slb serverfarms

Displays information about the server farm configuration.

0

(Optional) Indicates that the password is unencrypted. This is the default setting.

7

(Optional) Indicates that the password is encrypted.

password

Password value for MD5 authentication.

timeout

(Optional) Delay period, in seconds, during which both the old password and the new password are accepted. The valid range is from 0 to 65535. The default is 180.

12.1(8a)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.3(4)T

This command was integrated into Cisco IOS Release 12.3(4)T.

12.2(18)SXD

This command was integrated into Cisco IOS Release 12.2(18)SXD.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

agent

Identifies a DFP agent to which IOS SLB can connect.

ip dfp agent

Identifies a DFP agent subsystem and initiates DFP agent configuration mode.

ip slb dfp

Configures DFP, supplies an optional password, and initiates DFP configuration mode.

replicate casa (firewall farm)

Configures a stateful backup of IOS SLB decision tables to a backup switch.

replicate casa (virtual server)

Configures a stateful backup of IOS SLB decision tables to a backup switch.

ip-address

(Optional) IP address of the peer KAL-AP manager.

port

Content Application Peering Protocol (CAPP) User Datagram Protocol (UDP) port number to which the KAL-AP agent is to connect. Valid port numbers are 1 to 65535.

12.2(33)SRC

This command was introduced.

ip capp udp

Enables the IOS SLB KeepAlive Application Protocol (KAL-AP) agent and enters SLB Content Application Peering Protocol (CAPP) configuration mode.

ip-address

(Optional) IP address of the peer KAL-AP.

encrypt

(Optional) Indicates how the secret-string is represented when the configuration is displayed (for example, show run), or how it is written to nonvolatile memory (for example, write memory).

The possible values are 0 and 7:

• 0 --The secret-string is stored in plain text. This is the default setting.
• 7 --The secret-string is encrypted before it is displayed or written to nonvolatile memory.

secret-string

1- to 64-character clear password value for MD5 authentication. All characters are valid; case is significant. This password must match the password configured on the host agent.

The secret-stringis always sent in plain text when the configuration is downloaded.

The secret-stringmust match the secret that is specified on the KAL-AP client.

12.2(33)SRC

This command was introduced.

ip capp udp

Enables the IOS SLB KeepAlive Application Protocol (KAL-AP) agent and enters SLB Content Application Peering Protocol (CAPP) configuration mode.

port

UDP port number to which the custom UDP probe is to connect.

12.1(13)E3

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb probe custom udp

Configures a custom User Datagram Protocol (UDP) probe name and enters custom UDP probe configuration mode.

real (server farm)

Identifies a real server by IP address and optional port number as a member of a server farm and enters real server configuration mode.

show ip slb probe

Displays information about an IOS Server Load Balancing (IOS SLB) probe.

port-number

Port number used by a DFP manager to connect to a DFP agent. The valid range is from 1 to 65535.

12.1(8a)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.3(4)T

This command was integrated into Cisco IOS Release 12.3(4)T.

12.2(18)SXD

This command was integrated into Cisco IOS Release 12.2(18)SXD.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

agent

Identifies a DFP agent to which IOS SLB can connect.

ip dfp agent

Identifies a DFP agent subsystem and initiates DFP agent configuration mode.

ip slb dfp

Configures DFP, supplies an optional password, and initiates DFP configuration mode.

port

TCP or User Datagram Protocol (UDP) port number to which the HTTP probe is to connect.

12.1(3a)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb probe http

Configures an HTTP probe name and enters HTTP probe configuration mode.

real (server farm)

Identifies a real server by IP address and optional port number as a member of a server farm and enters real server configuration mode.

show ip slb probe

Displays information about an IOS SLB probe.

port

TCP port number to which the TCP probe is to connect.

12.1(11b)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb probe tcp

Configures a TCP probe name and enters TCP probe configuration mode.

real (server farm)

Identifies a real server by IP address and optional port number as a member of a server farm and enters real server configuration mode.

show ip slb probe

Displays information about an IOS SLB probe.

roundrobin

(Optional) Uses the weighted round robin algorithm for selecting the real server to handle the next new connection for the server farm. See the Weighted Round Robin section for a detailed description of this algorithm. This algorithm is the default value.

RADIUS load balancing requires the weighted round robin algorithm.

General packet radio service (GPRS) load balancing without GPRS Tunneling Protocol (GTP) cause code inspection enabled requires the weighted round robin algorithm.

The Home Agent Director requires the weighted round robin algorithm.

leastconns

(Optional) Uses the weighted least connections algorithm for selecting the real server to handle the next new connection for this server farm. See the Weighted Least Connections section for a detailed description of this algorithm.

route-map mapname

(Optional) Uses IOS policy-based routing (PBR) for selecting the real server to handle the next new connection for this server farm. The mapname argument identifies the IOS PBR route map to be used. See the Route Map section for a detailed description of this algorithm.

The route map algorithm is supported only for RADIUS load balancing accelerated data plane forwarding.

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.

12.2

This command was integrated into Cisco IOS Release 12.2.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

12.2(33)SRC

The route-map keyword and mapname argument were added.

show ip slb serverfarms

Displays information about the server farm configuration.

weight (server farm)

Specifies the real server’s capacity, relative to other real servers in the server farm.

port

(Optional) Uses the source and destination TCP or User Datagram Protocol (UDP) port numbers, in addition to the source and destination IP addresses, when selecting a firewall.

12.1(3a)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

show ip slb firewallfarm

Displays information about the firewall farm configuration.

weight (firewall farm real server)

Specifies the firewall’s capacity, relative to other firewalls in the firewall farm.

probe

Name of the probe to associate with this firewall farm.

12.1(3a)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

show ip slb firewallfarm

Displays information about the server farm configuration.

probe

Name of the probe to associate with this server farm.

12.1(2)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

show ip slb serverfarms

Displays information about the server farm configuration.

12.1(11b)E

This command was introduced, replacing the udp command.

12.1(12c)E

This command was integrated into Cisco IOS Release 12.1(12c)E, replacing the protocol udpcommand.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

show ip slb firewallfarm

Displays information about the firewall farm configuration.

12.1(11b)E

This command was introduced, replacing the tcp command.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

show ip slb firewallfarm

Displays information about the firewall farm configuration.

12.2(33)SRE

This command was introduced.

mls ip slb purge global

Specifies protocol-level purging of MLS entries from active TCP and UDP flow packets.

purge sticky

TBD

12.1(11b)E

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

sticky (virtual server)

Assigns all connections from a client to the same real server.

attribute-number

RADIUS attribute number.

26

RADIUS attribute number 26.

vsa

Vendor-specific attribute number.

vendor-ID

Vendor ID.

3gpp

Third Generation Partnership Project (3GPP) vendor ID.

3gpp2

Third Generation Partnership Project 2 (3GPP2) vendor ID.

sub-attribute-number

Sub-attribute number.

12.2(14)ZA5

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

sticky (virtual server)

Assigns all connections from a client to the same real server.

12.2(33)SRE

This command was introduced.

mls ip slb purge global

Specifies protocol-level purging of MLS entries from active TCP and UDP flow packets.

purge connection

Enables IOS SLB firewall load balancing to send purge requests for connections.

sticky (firewall farm datagram protocol)

Assigns all connections from a client to the same firewall.

sticky (firewall farm TCP protocol)

Assigns all connections from a client to the same firewall.

encrypt

(Optional) Indicates how the secret-string is represented when the configuration is displayed (for example, show run), or how it is written to nonvolatile memory (for example, write memory).

The possible values are 0 and 7:

• 0 --The secret-string is stored in plain text. This is the default setting.
• 7 --The secret-string is encrypted before it is displayed or written to nonvolatile memory.

secret-string

1- to 64-character clear password value for MD5 authentication. All characters are valid; case is significant. This password must match the password configured on the host agent.

The secret-stringis always sent in plain text when the configuration is downloaded.

The secret-stringmust match the secret that is specified on the RADIUS client (for example, the gateway general packet radio service [GPRS] support node [GGSN]).

12.2(33)SRB

This command was introduced.

ip slb serverfarm

Identifies a server farm and enters server farm configuration mode.

show ip slb vservers

Displays information about the virtual servers defined to IOS Server Load Balancing (IOS SLB).

virtual

Configures the virtual server attributes.

group-number

VSA correlation group number to be used for VSA correlation in the RADIUS Accounting-Start packets.

encrypt

(Optional) Indicates how the secret-string is represented when the configuration is displayed (for example, show run), or how it is written to nonvolatile memory (for example, write memory).

The possible values are 0 and 7:

• 0 --The secret-string is stored in plain text. This is the default setting.
• 7 --The secret-string is encrypted before it is displayed or written to nonvolatile memory.

secret-string

1- to 64-character clear password value for MD5 authentication. All characters are valid; case is significant. This password must match the password configured on the host agent.

The secret-stringis always sent in plain text when the configuration is downloaded.

12.2(33)SRC

This command was introduced.

radius inject auth

Configures a vendor-specific attribute (VSA) correlation group for an IOS SLB RADIUS load balancing accelerated data plane forwarding authentication virtual server, and specifies whether IOS SLB is to create VSA correlation entries based on RADIUS calling station IDs or RADIUS usernames.

radius inject auth timer

Configures a timer for vendor-specific attribute (VSA) correlation for an IOS SLB RADIUS load balancing accelerated data plane forwarding authentication virtual server.

radius inject auth vsa

Buffers vendor-specific attributes (VSAs) for VSA correlation for an IOS SLB RADIUS load balancing accelerated data plane forwarding authentication virtual server.

group-number

VSA correlation group number.

calling-station-id

Specifies that IOS SLB is to create VSA correlation entries based on the RADIUS calling station ID attribute in the RADIUS payload when RADIUS Access-Request messages are exchanged.

username

Specifies that IOS SLB is to create VSA correlation entries based on the RADIUS username attribute in the RADIUS payload when RADIUS Access-Request messages are exchanged.

12.2(33)SRC

This command was introduced.

calling-station-id

Configures an ASCII regular expression string to be matched against the calling station ID attribute in the RADIUS payload.

radius inject acct key

Configures a vendor-specific attribute (VSA) correlation group for an IOS SLB RADIUS load balancing accelerated data plane forwarding accounting virtual server, and enables Message Digest Algorithm Version 5 (MD5) authentication for VSA correlation.

radius inject auth timer

Configures a timer for vendor-specific attribute (VSA) correlation for an IOS SLB RADIUS load balancing accelerated data plane forwarding authentication virtual server.

radius inject auth vsa

Buffers vendor-specific attributes (VSAs) for VSA correlation for an IOS SLB RADIUS load balancing accelerated data plane forwarding authentication virtual server.

username

Configures an ASCII regular expression string to be matched against the username attribute in the RADIUS payload.

seconds

Time, in seconds, that IOS SLB maintains an entry in the VSA correlation database. Valid range is 1 to 255.

12.2(33)SRC

This command was introduced.

radius inject acct key

Configures a vendor-specific attribute (VSA) correlation group for an IOS SLB RADIUS load balancing accelerated data plane forwarding accounting virtual server, and enables Message Digest Algorithm Version 5 (MD5) authentication for VSA correlation.

radius inject auth

Configures a vendor-specific attribute (VSA) correlation group for an IOS SLB RADIUS load balancing accelerated data plane forwarding authentication virtual server, and specifies whether IOS SLB is to create VSA correlation entries based on RADIUS calling station IDs or RADIUS usernames.

radius inject auth vsa

Buffers vendor-specific attributes (VSAs) for VSA correlation for an IOS SLB RADIUS load balancing accelerated data plane forwarding authentication virtual server.

vendor-id

VSA to be buffered:

• cisco --Only the Cisco VSA can be buffered at this time.

12.2(33)SRC

This command was introduced.

radius inject acct key

Configures a vendor-specific attribute (VSA) correlation group for an IOS SLB RADIUS load balancing accelerated data plane forwarding accounting virtual server, and enables Message Digest Algorithm Version 5 (MD5) authentication for VSA correlation.

radius inject auth

Configures a vendor-specific attribute (VSA) correlation group for an IOS SLB RADIUS load balancing accelerated data plane forwarding authentication virtual server, and specifies whether IOS SLB is to create VSA correlation entries based on RADIUS calling station IDs or RADIUS usernames.

radius inject auth timer

Configures a timer for vendor-specific attribute (VSA) correlation for an IOS SLB RADIUS load balancing accelerated data plane forwarding authentication virtual server.

maximum-rate

Maximum number of connections allowed for the real server. Valid values range from 1 to 4294967295.

burst burst-rate

(Optional) Maximum connection burst rate allowed for the real server. Configure a burst rate if you expect the real server to receive connection requests at random intervals.

Valid values range from (maximum-rate/10) + 1 to maximum-rate. The default burst rate is (maximum-rate/10) connections per second. We recommend that you specify a burst rate of at least (maximum-rate/4).

For example, if maximum-rate is set to 3212, the valid range is 322 to 3212; the default burst rate is (3212/10), or 321 connections per second; and we recommend a burst rate of at least (3212/4), or 803 connections per second.

12.2(33)SRC

This command was introduced.

ip-address

Real server IP address.

12.1(3a)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

inservice (firewall farm real server)

Enables the firewall for use by IOS SLB.

show ip slb firewallfarm

Displays information about the firewall farm configuration.

show ip slb reals

Displays information about the real servers.

ipv4-address

Real server IPv4 address.

ipv6 ipv6-address

(Optional) For dual-stack, real server IPv6 address.

port

(Optional) Port translation for the server. Valid values range from 1 to 65535.

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.

12.2

This command was integrated into Cisco IOS Release 12.2.

12.1(2)E

The port argument was added.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

15.0(1)S

The ipv6 keyword and ipv6-address argument were added.

inservice (server farm real server)

Enables the real server for use by IOS SLB.

show ip slb reals

Displays information about the real servers.

show ip slb serverfarms

Displays information about the server farm configuration.

ip-address

IP address of the real server that is to use static NAT.

port

(Optional) Layer 4 source port number, used by IOS Server Load Balancing (IOS SLB) to differentiate between User Datagram Protocol (UDP) responses from the real server and connections initiated by the real server.

12.1(11b)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb static

Configures a real server’s NAT behavior and enters static NAT configuration mode.

show ip slb reals

Displays information about the real servers.

show ip slb static

Displays information about the static NAT configuration.

threshold

Number of unacknowledged TCP SYNs (or Create PDP requests, in general packet radio service [GPRS] load balancing) that are directed to a real server before the connection is reassigned to a different real server. An unacknowledged SYN is one for which no SYN or ACKnowledgment (ACK) is detected before the next SYN arrives from the client. IOS Server Load Balancing (IOS SLB) allows 30 seconds for the connection to be established or for a new SYN to be received. If neither of these occurs within that time, the connection is removed from the IOS SLB database.

The 30-second timer is restarted for each SYN as long as the number of connection reassignments specified in the faildetect numconns (real server)command is not exceeded. See the faildetect numconns (real server) command for more information.

Valid threshold values range from one 1 to 4. The default value is 3.

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.

12.2

This command was integrated into Cisco IOS Release 12.2.

12.1(9)E

This command was modified to support general packet radio service (GPRS) load balancing.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(14)SX

Support for this command was introduced on the Cisco 7600 series routers that are configured with a Supervisor Engine 720.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

faildetect numconns

Specifies the conditions that indicate a server failure.

inservice (real server)

Enables the real server for use by the IOS SLB feature.

real (server farm)

Identifies a real server by IP address and optional port number as a member of a server farm and enters real server configuration mode.

show ip slb reals

Displays information about the real servers.

show ip slb serverfarms

Displays information about the server farm configuration.

listen-ip

Listening IP address for state exchange messages that are advertised.

remote-ip

Destination IP address for all state exchange signals.

port

TCP or User Datagram Protocol (UDP) port number or port name for all state exchange signals.

interval

(Optional) Maximum replication delivery interval from 1 to 300 seconds. The default value is 10 seconds.

password

(Optional) Specifies the password for Message Digest Algorithm Version 5 (MD5) authentication.

encrypt

(Optional) Indicates how the secret-string is represented when the configuration is displayed (for example, show run), or how it is written to nonvolatile memory (for example, write memory).

The possible values are 0 and 7:

• 0 --The secret-string is stored in plain text. This is the default setting.
• 7 --The secret-string is encrypted before it is displayed or written to nonvolatile memory.

secret-string

(Optional) 1- to 64-character clear password value for MD5 authentication. All characters are valid; case is significant. This password must match the password configured on the host agent.

The secret-stringis always sent in plain text when the configuration is downloaded.

The secret-stringmust match the secret that is specified on the RADIUS client (for example, the gateway general packet radio service [GPRS] support node [GGSN]).

timeout

(Optional) Delay period, in seconds, during which both the old password and the new password are accepted. The default value is 180 seconds.

12.1(3a)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

show ip slb firewallfarm

Displays information about the firewall farm configuration.

show ip slb replicate

Displays the configuration of IO SLB IP replication.

listen-ip

Listening IP address for state exchange messages that are advertised.

remote-ip

Destination IP address for all state exchange signals.

port

TCP or User Datagram Protocol (UDP) port number or port name for all state exchange signals.

interval

(Optional) Maximum replication delivery interval from 1 to 300 seconds. The default value is 10 seconds.

password

(Optional) Specifies the password for Message Digest Algorithm Version 5 (MD5) authentication.

encrypt

(Optional) Indicates how the secret-string is represented when the configuration is displayed (for example, show run), or how it is written to nonvolatile memory (for example, write memory).

The possible values are 0 and 7:

• 0 --The secret-string is stored in plain text. This is the default setting.
• 7 --The secret-string is encrypted before it is displayed or written to nonvolatile memory.

secret-string

(Optional) 1- to 64-character clear password value for MD5 authentication. All characters are valid; case is significant. This password must match the password configured on the host agent.

The secret-stringis always sent in plain text when the configuration is downloaded.

The secret-stringmust match the secret that is specified on the RADIUS client (for example, the gateway general packet radio service [GPRS] support node [GGSN]).

timeout

(Optional) Delay period, in seconds, during which both the old password and the new password are accepted. The default value is 180 seconds.

12.1(2)E

This command was introduced.

12.1(3a)E

The 0and 7keywords were added.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

show ip slb replicate

Displays the configuration of IOS SLB IP replication.

show ip slb vserver

Displays information about the virtual servers defined to IOS SLB.

interval

Maximum replication delivery interval, in seconds. Replication updates are sent to the peer device (CASA or slave) when the interval expires, or when the send buffer (1500 bytes) is full.

The valid range is 1 to 300 seconds. The default value is 10 seconds.

12.2(14)ZA5

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb replicate slave rate

Sets the replication message rate for IOS Server Load Balancing (IOS SLB) slave replication.

replicate casa (firewall farm)

Configures a stateful backup of IOS Server Load Balancing (IOS SLB) decision tables to a backup switch

replicate slave (firewall farm)

Enables stateful backup of redundant route processors for an IOS Server Load Balancing (IOS SLB) firewall farm.

show ip slb replicate

Displays the configuration of IOS Server Load Balancing (IOS SLB) IP replication.

show ip slb vservers

Displays information about the virtual servers defined to IOS Server Load Balancing (IOS SLB).

interval

Maximum replication delivery interval, in seconds. Replication updates are sent to the peer device (CASA or slave) when the interval expires, or when the send buffer (1500 bytes) is full.

The valid range is 1 to 300 seconds. The default value is 10 seconds.

12.2(14)ZA5

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb replicate slave rate

Sets the replication message rate for IOS Server Load Balancing (IOS SLB) slave replication.

replicate casa (virtual server)

Configures a stateful backup of IOS Server Load Balancing (IOS SLB) decision tables to a backup switch

replicate slave (virtual server)

Enables stateful backup of redundant route processors for an IOS Server Load Balancing (IOS SLB) virtual server.

show ip slb replicate

Displays the configuration of IOS Server Load Balancing (IOS SLB) IP replication.

show ip slb vserver

Displays information about the virtual servers defined to IOS Server Load Balancing (IOS SLB).

12.2(14)ZA5

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb replicate slave rate

Sets the replication message rate for IOS SLB slave replication.

replicate casa (firewall farm)

Configures a stateful backup of IOS SLB decision tables to a backup switch

replicate interval (firewall farm)

Sets the replication delivery interval for an IOS SLB firewall farm.

show ip slb replicate

Displays the configuration of IOS SLB IP replication.

show ip slb vservers

Displays information about the virtual servers defined to IOS SLB.

12.2(14)ZA5

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb replicate slave rate

Sets the replication message rate for IOS SLB slave replication.

replicate casa (virtual server)

Configures a stateful backup of IOS SLB decision tables to a backup switch

replicate interval (virtual server)

Sets the replication delivery interval for an IOS SLB virtual server.

show ip slb replicate

Displays the configuration of IOS SLB IP replication.

show ip slb vservers

Displays information about the virtual servers defined to IOS SLB.

data start-byte

Identifies the payload offset at which the hex-data-stringis to be placed into the packet.

data continue

String of characters represented by the hex-data-stringargument is to be placed after the last defined byte in the request packet.

hex-data-string

Payload of the UDP request packet, up to 100 bytes of data in hexadecimal format.

12.1(13)E3

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb probe custom udp

Configures the IOS SLB IP probe name.

response

Defines the data string to match against custom UDP probe response packets.

show ip slb probe

Displays information about an IOS SLB probe.

method

(Optional) Configures the way the data is requested from the server.

get

Configures the Get method to request data from the server.

post

Configures the Post method to request data from the server.

head

Configures the header data type to request data from the server.

name name

Configures the name string of the data to send to the servers to request data. The character string is limited to 15 characters.

url path

(Optional) Configures the path from the server.

12.1(2)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb probe http

Configures the Cisco IOS SLB IP probe name.

show ip slb probe

Displays information about an Cisco IOS SLB probe.

clause-number

Identifies the response clause that is being modified. Up to 8 response clauses can be specified, on individual response commands.

data start-byte

Byte in the UDP response packet at which the hex-data-stringis to be matched.

hex-data-string

Up to 100 bytes of data, in hexadecimal format, that is to be matched against the UDP response packet payload. If the data does not match, the probe fails.

12.1(13)E3

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

ip slb probe custom udp

Configures the IOS SLB IP probe name.

request (custom UDP probe)

Defines the payload of the UDP request packet to be sent by a custom UDP probe.

show ip slb probe

Displays information about an IOS SLB probe.

retry-value

Time, in seconds, to wait after the detection of a server failure before a new connection to the server is attempted.

If the new connection attempt succeeds, the real server is placed in OPERATIONAL state. If the connection attempt fails, the timer is reset, the connection is reassigned, and the process repeats until it is successful or until the server is placed in the OUTOFSERVICE state by the network administrator.

Valid values range from 1 to 3600. The default value is 60 seconds.

A value of 0 means do not attempt a new connection to the server when it fails.

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.

12.2

This command was integrated into Cisco IOS Release 12.2.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

real (server farm)

Identifies a real server by IP address and optional port number as a member of a server farm and enters real server configuration mode.

show ip slb reals

Displays information about the real servers.

show ip slb serverfarms

Displays information about the server farm configuration.

primary-farm

Name of a primary server farm that has already been defined using the ip slb serverfarmcommand.

• For IPv4 or dual-stack, name of the IPv4 server farm.
• For IPv6, name of the IPv6 server farm.

backup backup-farm

(Optional) Name of a backup server farm that has already been defined using the ip slb serverfarmcommand.

• For IPv4 or dual-stack backup, name of the IPv4 server farm.
• For IPv6 backup, name of the IPv6 server farm.

sticky

(Optional) Specifies that sticky connections are to be used in the backup server farm.

ipv6-primary ipv6-primary-farm

(Optional) For dual-stack, name of the primary IPv6 server farm that has already been defined using the ip slb serverfarmcommand.

ipv6-backup ipv6-backup-farm

(Optional) For dual-stack, name of the backup IPv6 server farm that has already been defined using the ip slb serverfarmcommand.

map map-id priority priority

(Optional) Associates an IOS SLB GPRS Tunneling Protocol (GTP) or RADIUS map with the server farm for general packet radio service (GPRS) or RADIUS load balancing.

The map ID identifies a specific map that has already been defined using the ip slb map command.

The priority specifies the order of preference of the specified map. A lower number indicates a higher priority. The range of priorities is 1 to 255.

Priorities for different maps do not have to be contiguous. That is, you can have three maps with priorities 1, 5, and 10, respectively.

When IOS SLB searches for a match, it does so on the basis of both the map ID and the map priority. Each map ID and each map priority must be unique across all server farms associated with the virtual server. That is, you cannot configure more than one map with the same ID or priority.

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.

12.2

This command was integrated into Cisco IOS Release 12.2.

12.1(8a)E

The backup and sticky keywords and the backup-farm argument were added.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.

12.2(33)SRB

The map and priority keywords and the map-id and priorityarguments were added.

15.0(1)S

The ipv6-primaryand ipv6-backupkeywords and the ipv6-primary-farmand ipv6-backup-farm arguments were added.

ip slb serverfarm

Identifies a server farm and enters server farm configuration mode.

show ip slb vservers

Displays information about the virtual servers defined to IOS Server Load Balancing (IOS SLB).

virtual

Configures the virtual server attributes.

12.2(18)SXF5

This command was introduced.

clear fm slb counters

Clears Feature Manager (FM) IOS Server Load Balancing (IOS SLB) counters.

agent subsystem-name

(Optional) Displays information about the specified DFP agent, such as slbfor IOS SLB.

detail

(Optional) Displays detailed DFP agent information.

12.1(8a)E

This command was introduced.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.3(4)T

This command was integrated into Cisco IOS Release 12.3(4)T.

12.2(18)SXD

This command was integrated into Cisco IOS Release 12.2(18)SXD.

agent

Identifies a DFP agent to which IOS SLB can connect.

ip dfp agent

Identifies a DFP agent subsystem and initiates DFP agent configuration mode.

ip slb dfp

Configures DFP, supplies an optional password, and initiates DFP configuration mode.

vserver virtual-server

(Optional) Displays only those connections (or sessions, in GPRS load balancing and the Home Agent Director) associated with the specified virtual server.

client ip-address

(Optional) Displays only those connections (or sessions, in GPRS load balancing and the Home Agent Director) associated with the specified client IP address.

firewall firewall-farm