ACE One Arm Mode vs Routed Mode

[helsayed78]

Gents,

When is it required to use the One Arm Mode and one do I use the routed mode? Actually I am confused and would really like to know the pros and cons of each?

Regards,

Hesham                  

[Cesar Roque]

Hello Hesham,

Here is a very good link about One-Armed:

http://www.cisco.com/en/US/customer/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/getting/started/guide/one_arm.html

Here about Route Mode;

http://www.cisco.com/en/US/customer/products/hw/modules/ps2706/products_configuration_example09186a00809c3048.shtml

[ajayku2 · Accepted solution]

Hi Hesham,

When you do not want to change the physical topology of your network then you usually go with ONE ARM mode.

Such as default gateway on server, IP addressing on servers. In this case client can access the server directly as well.

Its a flat network topology where your VIP and servers are in the same network ( VLAN ).

You use routed mode when you want to segregate the servers in seperate vlan and don't want to allow client to access it directly.

Client and VIP in same VLAN >>> ACE >>>>>> Server VLAN ( In this case we usually point the default gateway to ACE)

hope it helps.

regards,

Ajay Kumar

[helsayed78]

Hi Cesar,

The links you have sent are not opening? could you please check.

Regards,

Hesham

[ajayku2]

Hi Hesham,

Links appears to be correct. If you are not able to get the doc try to use a different browser.

http://www.cisco.com/en/US/customer/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/getting/started/guide/one_arm.html

http://www.cisco.com/en/US/customer/products/hw/modules/ps2706/products_configuration_example09186a00809c3048.shtml

regards,

Ajay Kumar

[helsayed78]

The links still don't open, however I have a question regaridng the one-arm mode.

Why  do I have to specify a nat IP from the same range although I can use the same VIP for Natting ?

Regards,

Hesham