The same network and id vlan in different contex in the same ACE

Alvaro Perez Unzueta · ‎02-23-2009

Hello,

I want to know if I can create 2 context in an ACE with the same ID Vlans that other context and this can be in the same network, in the configuration I explain.

Best Regards

++++++++Switch C6513++++++++

!

svclc multiple-vlan-interfaces

svclc module 6 vlan-group 100

svclc module vlan-group 100 60,233

!

vlan 60

name inside

!

vlan 233

name outside

!

interface vlan 233

ip address 10.24.16.1 255.255.255.0

no shutdown

!

++++++++Context Admin++++++++

hostname ACE-MOD6

ft interface vlan 350

ip address 10.24.15.34 255.255.255.248

peer ip address 10.24.15.33 255.255.255.248

no shutdown

ft peer 1

heartbeat interval 200

heartbeat count 20

ft-interface vlan 350

ft group 1

peer 1

priority 200

peer priority 150

associate-context Admin

inservice

context SERV1

description SERV1

allocate-interface vlan 60

allocate-interface vlan 233

context SERV2

description SERV2

allocate-interface vlan 60

allocate-interface vlan 233

ft group 2

peer 1

priority 200

peer priority 150

associate-context SERV1

inservice

ft group 3

peer 1

priority 150

peer priority 200

associate-context SERV2

inservice

++++++Contex SERV1++++++

interface vlan 60

ip address 10.24.8.5 255.255.255.0

no shutdown

interface vlan 233

ip address 10.24.16.5 255.255.255.0

no shutdown

!

ip route 0.0.0.0 0.0.0.0 10.24.16.1

!

++++++Contex SERV2++++++

interface vlan 60

ip address 10.24.8.6 255.255.255.0

no shutdown

interface vlan 233

ip address 10.24.16.6 255.255.255.0

no shutdown

!

ip route 0.0.0.0 0.0.0.0 10.24.16.1

!

Syed Iftekhar Ahmed · ‎02-23-2009

Sharing Vlans is possible in routed mode.

Its not possible when ACE is operating in Bridge mode.

You need to use unique IP addresses in each context for shared vlans.

Also make sure to use " shared-vlan-hostid " command.

"

When contexts share a VLAN, the ACE assigns a different MAC address to the VLAN on each context. The MAC addresses reserved for shared VLANs are 0x001243dc6b00 to 0x001243dcaaff, inclusive. All ACE modules derive these addresses from a global pool of 16k MAC addresses. This pool is divided into 16 banks, each containing 1,024 addresses. An ACE supports only 1,024 shared VLANs, and would use only one bank of MAC addresses out of the pool.

By default, the bank of MAC addresses that the ACE uses is randomly selected at boot time. However, if you configure two ACE modules in the same Layer 2 network and they are using shared VLANs, the ACEs may select the same address bank and use the same MAC addresses. To avoid this conflict, you need to configure the bank that the ACEs will use. "

Above paragraph & More details at

http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/v3.00_A2/command/reference/config.html#wp1447465

Syed Iftekhar Ahmed