Coyote Point Systems Equalizer GX Series, Administration Manual

Page: 369 / 866

Spoof
When the spoof option is enabled on a cluster, Equalizer uses the client’s
IP address as the source IP address in all packets sent to a server in that
cluster. This option is enabled by default.
When spoof is enabled, all server responses to client requests that came
through the Equalizer cluster IP address must be routed by the server
back to the client through Equalizer. In many cases, the easiest way to do
this is to set the default gateway on the server with a server instance in a
server pool to Equalizer’s IP address on the server VLAN. If this is not pos-
sible, you can establish static routes on the server to send responses to
specific client IP addresses to Equalizer’s IP address on the VLAN.
If you disable spoof, the server receiving the request will see Equalizer’s IP
address as the client address because the TCP connection to the client is
terminated when the request is routed. The server will therefore send its
response back to Equalizers IP address. Disabling the spoof option enables
Source Network Address Translation (SNAT).
Click on the
Commit
button after making changes.
Copyright © 2014 Coyote Point Systems, A Subsidiary of Fortinet, Inc.
All Rights Reserved. 369
Equalizer Administration Guide