topic Re: ACE/FWSM design question in Application Networking

ACE/FWSM design question

d-fillmore — Wed, 20 Feb 2008 16:35:57 GMT

Hi - I'm designing the network topology for a multi tiered application using a 6509 with ACE and FWSM. Each tier will be in it's own VLAN and IP subnet and communications between tiers needs to be firewalled and in some cases loadbalanced.

I propose to do this by using a different context on both the ACE and the FWSM and using bridging mode within each context on both the FWSM and ACE as per Cisco's verified design for ACE/FWSM. It's perfectly feasable that a connection could be made for example to a server in the web tier, which would then need to make a connection to a server in the Application tier, which would in turn need to make a connection to a server in the database tier.

As far as I can see, the design I've proposed should work. Is anyone in a position to comment on whether there is anything wrong with this design, or a better way to do it?

There is no NAT to consider within this network

I've attached a JPG showing an example of the sort of connectivity that could be expected.

Many Thanks in advance

Re: ACE/FWSM design question

cwangskr — Mon, 24 Mar 2008 20:52:48 GMT

We have the same design and it works fine.

Re: ACE/FWSM design question

dtochilovsky — Wed, 26 Mar 2008 20:21:18 GMT

We are planning to do the same type of design. Does anyone have any documents that point to the specifics of the design and configuraton details?

Any help will be greatley appreciated.

Dmitry.

Re: ACE/FWSM design question

d-fillmore — Sun, 30 Mar 2008 19:33:43 GMT

Thanks for your responses. I'm half way through implemeting this and there have been no problems so far.

With regards design & config notes for this, this document has most of what you need - http://www.cisco.com/application/pdf/en/us/guest/netsol/ns376/c649/ccmigration_09186a008078de90.pdf

Re: ACE/FWSM design question

dtochilovsky — Fri, 04 Apr 2008 17:44:46 GMT

Does anyone have any experience in designing/implementing the FWSM in routed mode but the ACE in bridged mode?

Like this:

MSFC > FWSM(routed) > ACE(bridged)

thank you

Dmitry.