topic BRIDGE IP address on ACE in Application Networking

BRIDGE IP address on ACE

David Martinez Garcia — Wed, 08 Jan 2014 09:32:27 GMT

Hi gyus.

I have a doubt with IP Adresses in BVI interfaces:

Why we need IP addresses? I have configures MAC STICKY on client VLAN.
I need alias in BVI in a HA deploy?

Thanks!

BRIDGE IP address on ACE

Kanwaljeet Singh — Wed, 08 Jan 2014 16:00:46 GMT

Hi David,

If you will not define an IP address on BVI, ACE won't get enabled and pass traffic. To initiate traffic, such as ARP requests, from the ACE or for management traffic, a bridge group requires an interface with an IP address on the same subnet. From user guide:

A BVI is associated with a corresponding bridge group to routed interfaces within the router but acts as a routed interface that does not support bridging. The BVI is assigned with the number of the associated bridge group. Only one BVI is supported for each bridge group. The MAC address of the BVI is the same as the addresses of the associated bridge-group interfaces. You must enable the BVI and the associated bridge-group interfaces to forward traffic.

You don't need an alias IP in HA deployment since ACE is not the DG of the servers.

Regards,

Kanwal

BRIDGE IP address on ACE

David Martinez Garcia — Wed, 08 Jan 2014 17:05:12 GMT

Ok!

Thank you so much Kanwal.

BRIDGE IP address on ACE

Kanwaljeet Singh — Wed, 08 Jan 2014 17:11:56 GMT

Hi David,

You do it on client side vlan. If you enable mac-sticky ACE will send the traffic back to device from where it received the traffic(used mostly in active-active FW SCENAIRO). You don't need it on server side since ACE will refer to connection table or sticky etc to send the traffic to same server. It doesn't make any difference to server if MAC-sticky is enabled on ACE.

Regards,

Kanwal