Hello,
I am working on stitching Citrix Netscaler LB to ACI Platform via Service Graph Unmanaged. The most of the documents I saw so far says EPGs for consumer (say internet users) and EPG for provider (say internet users). I am trying to understand how the ACI will know/learn about Virtual IPs on the LB as I don't see how I will specify them or will I need to specify them at all?
Many thanks.
Solved! Go to Solution.
In a LB-PBR scenario your VIPs will typically be part of the LB-service BD itself, so the VIP-subnet is directly connected to ACI. Have a look at the following whitepaper:
HTH
In a LB-PBR scenario your VIPs will typically be part of the LB-service BD itself, so the VIP-subnet is directly connected to ACI. Have a look at the following whitepaper:
HTH
Great, thanks. Having the VIPs in LB_BD resolved the problem.
What if VIP subnet is configured only inside of load balancer and external interface of the loadbalancer uses different IP subnet? Is such a scenario supported with ACI? In standard DC network I'd use a static route for VIP range towards the external LB interface.
Actually the most flexible way to attach an LB is to do so via and L3 External. This way Static routes are easier to configure in situations like this as well as for servers that may sit behind the LB. So yes, I'd say this is definitely supported.
edit: Responded too quickly. You can also configure /32 routes on the BD for the VIPs in cases like this as well. I believe in newer versions you should be able to use PBR service graphs with L3 Externals and configure static routes as I mentioned above, but I would double check the PBR white paper and release notes.
Thanks.
For reference here is the link which describes how to configure static route on a BD. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L3_config/b_Cisco_APIC_Layer_3_Configuration_Guide/b_Cisco_APIC_Layer_3_Configuration_Guide_chapter_01000.html
@stcorry wrote:Actually the most flexible way to attach an LB is to do so via and L3 External. This way Static routes are easier to configure in situations like this as well as for servers that may sit behind the LB. So yes, I'd say this is definitely supported.
edit: Responded too quickly. You can also configure /32 routes on the BD for the VIPs in cases like this as well. I believe in newer versions you should be able to use PBR service graphs with L3 Externals and configure static routes as I mentioned above, but I would double check the PBR white paper and release notes.
Hi @stcorry, may I ask if a service graph can support this scenario (VIP subnet is different than LB-ACI subnet)? I understood from your post that L3out should work but I have a client who wants a service graph because of the PBR. Thanks.
Nice. I will test and let you know. Thanks for your quick reply.