Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

FWSM clustering using ACE

Hi,

I wish to cluster four FWSM modules using ACE module for getting higher throughput and scalability.

have anybody done this, what are the problems that we will face?

regards

sathappan

1 REPLY
Silver

Re: FWSM clustering using ACE

You can use the PBR method for FWSM clustering if the addresses of the source packets cannot be easily defined. But if the traffic source was the internet and not well defined source networks you would not be able to determine the FWSM selection based on the source address. The load balancing algorithm in the two ACE modules sync with each other in such a way to ensure that the fwsm selection from the first ace (insecure-secure) and the fwsm selection of the second ACE for the return path (secure-insecure) will always select the common same FWSM for a source-destination pair. There is no state sharing involved. It's the MAC-address sticky trick (the command is mac-sticky enable).

151
Views
0
Helpful
1
Replies
CreatePlease to create content