Question Cisco ACE mode bridge - client side connect to servers

Alvaro Perez Unzueta — Thu, 25 Aug 2011 03:26:21 GMT

Hello,

I have configured the cisco ace 4710 in mode bridge, but i want know if i can connect servers of the vlan 401 in the Switch, for example 10.1.40.50 with default-gateway SVI 401 10.1.40.10 with real servers of the ACE (10.1.40.2 and 10.1.40.3 with default-gateway bvi 10.1.40.1)

**********************************Cisco ACE**********************************

ace-demo/Admin# sh run
Generating configuration....

boot system image:c4710ace-mz.A3_2_4.bin
boot system image:c4710ace-mz.A3_2_1.bin

hostname ace-demo
interface gigabitEthernet 1/1
channel-group 1
no shutdown
interface gigabitEthernet 1/2
channel-group 1
no shutdown
interface gigabitEthernet 1/3
channel-group 1
no shutdown
interface gigabitEthernet 1/4
channel-group 1
no shutdown
interface port-channel 1
switchport trunk allowed vlan 400-401,450
no shutdown

access-list bpdufilter ethertype permit bpdu

access-list anyone line 8 extended permit ip any any
access-list anyone line 16 extended permit icmp any any

rserver host rsrv1
ip address 10.1.40.2
inservice
rserver host rsrv2
ip address 10.1.40.3
inservice

serverfarm host farm-demo
rserver rsrv1
inservice
rserver rsrv2
inservice

class-map type management match-any MGMT
2 match protocol icmp any
3 match protocol http any
4 match protocol https any
5 match protocol snmp any
6 match protocol telnet any
7 match protocol ssh any
class-map match-any VIP
3 match virtual-address 10.1.40.20 any
class-map type management match-any icmp
2 match protocol icmp any
class-map type http loadbalance match-any p-site-A

policy-map type management first-match ICMP
class icmp
permit
policy-map type management first-match MGMT
class MGMT
permit

policy-map type loadbalance first-match server-balance
class class-default
serverfarm farm-demo

policy-map multi-match client-side
class VIP
loadbalance vip inservice
loadbalance policy server-balance

interface vlan 400
description side-server
bridge-group 1
access-group input bpdufilter
access-group input anyone
service-policy input ICMP
no shutdown
interface vlan 401
description side-client
bridge-group 1
access-group input bpdufilter
access-group input anyone
service-policy input ICMP
service-policy input client-side
no shutdown
interface vlan 450
description mgmt
ip address 10.1.45.1 255.255.255.0
access-group input anyone
service-policy input MGMT
no shutdown

interface bvi 1
ip address 10.1.40.1 255.255.255.0
no shutdown

ip route 192.168.10.0 255.255.255.0 10.1.45.10

**********************************Switch**********************************

vlan 401

name client_side

interface vlan 401

ip address 10.1.40.10 255.255.255.0

no shutdown

Regards,

Question Cisco ACE mode bridge - client side connect to servers

ohynderi — Thu, 25 Aug 2011 08:05:05 GMT

Technically yes you can. A couple of questions:

- Will 10.1.40.50 be part of a serverfarm on ACE (with other rserver on vlan 400)

- Why gateway on 10.1.40.2 and 10.1.40.3 needs to be the ACE BVI IP and not 10.1.40.10?

Thanks,

Olivier

Question Cisco ACE mode bridge - client side connect to servers

Alvaro Perez Unzueta — Thu, 25 Aug 2011 14:35:23 GMT

Hello olivier,

- 10.1.40.50 is not part of serverfarm on ACE (vlan 401)

- The gateway can be 10.1.40.10 in vlan 401? the rserver on vlan 400.is it posoble?

Regards

Question Cisco ACE mode bridge - client side connect to servers

ohynderi — Thu, 25 Aug 2011 14:45:08 GMT

Hello agin!

So in bridge mode, with below topology, servers should have their gateway pointing to the router ip.

Router -- vl401 -- ACE -- vl400 -- Servers

So in your case, server on vlan 400 should have their default route pointing to 10.1.40.10.

--Olivier

topic Question Cisco ACE mode bridge - client side connect to servers in Application Networking

Question Cisco ACE mode bridge - client side connect to servers

Question Cisco ACE mode bridge - client side connect to servers

Question Cisco ACE mode bridge - client side connect to servers

Question Cisco ACE mode bridge - client side connect to servers