ACE30 - using a VIP as L3 gateway

[achrich]

Hi,

Is it all possible to use an ACE30 to RHI a VIP which acts as route for servers on LAN A to reach LAN B . We have 2xL2 WAN circuits between 2 sites used by only 4 servers for (different L3 subnets for the hosts). I`m considering using a VIP to load balance across 2 WAN circuits using L3 interfaces on the MSFC either side as rservers with a single VLAN in/out on the ACE where the VIP resides - simlair to using the Cisco design for firewall load balancing minus the inspections etc. Obviously we can do this entirely in the MSFC but considering options.

Thanks

[ajayku2]

Hi,

Advantages

• Tracking can be used to track virtual IP addresses that are behind a Network Address Translation (NAT) device (firewall).

Disadvantages

• IP SLA and tracking cannot track IP addresses at the port level; it cannot track individual port availability of a virtual IP address with multiple ports. This is a limitation of route health injection (RHI) as well.

Please have a look at the following document.

http://www.cisco.com/en/US/prod/collateral/contnetw/ps5719/ps7027/ps8361/guide_c07-572616_ps7027_Products_White_Paper.html