Sharing a VLAN between FWSM and ACE (Routed Mode)

[Roble Mumin]

Anybody in here with experience on sharing a Vlan between an ACE and a FWSM module?

I have a transfer network between the ACE and the FWSM in the same chassis. FWSM gets several vlans and ACE gets some Vlans.

I wanted to configure it like this.

firewall vlan group 10 <FWSM only vlans>

firewall vlan group 20 <shared FWSM and ACE vlan>

or

svclc vlan group 20 <shared FWSM and ACE vlan>

svclc vlan group 30 <ACE only vlans>

The design hides the client side network and the server side network for the ACE behind the FWSM module.

Layout:

|-- Clients <--> MSFC <--> FWSM <--> ACE <--> Server --|

So allocation on the 65xx would be like this.

firewall module n vlan-group 10,20

svclc module n vlan-group 20,30

Any obvious issues with this design if you share the vlan(s) referred in group 20 with both modules?

FWSM and ACE will be in routed mode.

Thanks for reading...

Roble

[Roble Mumin]

Never mind...

Just found the perfect answer for this in a another posting from Syed.

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Data%20Center&topic=SNA%20Data%20Center%20Networking&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1dddee0b/0#selected_message

Roble

[huh]

Roble,

I'm having same question. Could u repost the link? It seems invalid now.