Cisco CSS address translation

The Cisco CSS offers 2 address translation methods ; source groups and destination groups.

Source Group

When a connection is initiated outbound through the Cisco CSS (from any of the group services) the source IP is translated to the groups VIP address.
Source group servers are defined using the add service [service name] command.

Example : When SERVER-A initiates a connection outbound through the CSS, traffic will be source NAT`d behind address

  vip address
  add service SERVER-A
  add service SERVER-B

Destination Group

When connection is initiated to the groups defined VIP, traffic distributed to any of the servers that are configured within the group is proxied behind the VIP.
Destination groups are typically used when internal load balancing is required.
Destination group servers are defined using the add destination service [service name] command.

Example : When the client initiates a connection to group VIP ( (that is destined for either SERVER-A or SERVER-B) traffic is proxied behind the subsequent VIP ( Return traffic is then routed back through the CSS and balanced as per the configured content rule.

  vip address
  add destination service SERVER-A
  add destination service SERVER-B

About the Author


R Donato

Rick Donato is the Founder and Chief Editor of He currently works as an SDN/NFV Solutions Architect and has a keen interest in automation and the cloud.

You can find Rick on Twitter @f3lix001