ACE Module Routed design

james_46 · ‎03-24-2009

Hi all,

I have a requirement to install 2 ACE Modules into two 6509 chassis'

We want to run the ACE modules in a live/live scenario so we can utilise the two ACE modules

So we want to split the VIPS so we have some live on one ACE and others on the other.

Also the ACE modules will be setup in routed mode. We have a number of subnets we want to use on the client side - 3 to be exact, and there will be another 3 different subnets on the server side

A few points which are confusing me

For each subnet would i have to configure a SVI? And if so you can only have 1 SVI per contect so that would mean creating a context and a SVI for each subnet?

Are there any example configs which could help me out?

Any help would be appreciated

Thanks

James

huangedmc · ‎03-25-2009

See the config example here:

http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00809c3048.shtml

Normally you only need one client-side subnet per context, but multiple ones work too.

You'd create an SVI on MSFC for the client-side subnets only, otherwise server traffic would bypass the ACE.

Also keep in mind when you do active/active, it's done on the context level.

That means you need to create at least two contexts in addition to the Admin context. (although you can technically run things in /Admin)

Go through the example above, and the config guides below and you'll be all set:

http://www.cisco.com/en/US/products/ps6906/tsd_products_support_model_home.html

james_46 · ‎03-25-2009

Hi

Thanks for the feedback - much appreciated

That confirms what i was thinking

So for each client-side subnet i would create a specific context and a corresponding SVI on the 6509?

Cheers

James

Syed Iftekhar Ahmed · ‎03-25-2009

James

You are correct.

In a typical routed mode setup you have SVIs on the client side and HSRP IP on client side is configured as default gateway.

With respect to SVIs, just remember the golden rule " Return traffic from real servers should never bypass ACE ( for that matter any load balancer)".

SVIs on both Client & Server Side could make the return traffic bypass ACE.

Syed

james_46 · ‎03-25-2009

Hi Syed

Thanks for your reply

One more quick question:

When using multiple context in routed mode - the servers on the server side, will they be able to communicate with servers in the other context?

I would assume not but just want to clarify..

Cheers

James