Attaching service-policy to the ACE module

[lukaszkhalil]

Hello

I got confused when I was reading the ACE module config guide. In the part regarding the service-policy attachment there is information that

"The ACE allows only one policy of a specific feature type to be activated on a given interface", so I understand it as that I am not allowed to attach two LB service-polices to the same interface.

When I moved further I found an example, where two LB service-policies are applied to the same interface

policy-map multi-match LB-TRAFFIC-80

class VIP-ACCESS-MANAGER-80

loadbalance vip inservice

loadbalance policy POLICY-ACCESS-MANAGER-80

loadbalance vip icmp-reply active

policy-map multi-match LB-TRAFFIC-ANY

class VIP-ACCESS-MANAGER-ANY

loadbalance vip inservice

loadbalance policy POLICY-ACCESS-MANAGER-ANY

loadbalance vip icmp-reply active

interface vlan 758

description CLIENT-SIDE-VLAN

bridge-group 100

access-group input ALL

service-policy input LB-TRAFFIC-80

service-policy input LB-TRAFFIC-ANY

no shutdown

So my question is, which statement is true and is recommended by the best practices ?

Thank you in advance for any help

Regards

Lucas

[Daniel Arrondo Ostiz · Accepted solution]

Hi Lucas,

The documentation is a bit misleading on that point. What this phrase refers to is to those policy types that are mutually exclusive. In reality, this just applies to the management policy

For multi-match policies, it is allowed to have several applied on the same interfaces.

Regards

Daniel

[lukaszkhalil]

Hello

ok, thanks

Does it have any influence on the ACE's performance?

Which one is more recommended by Cisco regarding best practices?

Regards

Lukas

[Daniel Arrondo Ostiz · Accepted solution]

Hi Lukas,

Both options are equivalent, so, I don't think there is any official recommendation for one or the other. Personally, I think the best approach is using one multi-match policy per vlan with all the classes in there, because this way the configuration is quite easy to read.

Regards

Daniel

[lukaszkhalil]

Ok, thank you

Regards

Lukas