I tried to configure ACE module installed 6500 switch with brige mode. But it always failed.
The subnet (both VIP and real server) is terminated in the ASA firewall. for example, vip is 2.2.2.2 and real server is 2.2.2.100. when our internal user run a quick test from 1.1.1.1 to hit 2.2.2.2, we could find the connections are establised from ASA between them. Also I could find ACE fowarwd request to 2.2.2.100. To return traffcs. I thought ACE will change source IPs from 2.2.2.100 to 2.2.2.2, and then forward to ASA. But in the firewall, we could find the sessions from 2.2.2.100 to 1.1.1.1. So the connections are failed. I have to put nat dynamic to nat source IPs to fix it for workground solution.
Is this normal issue? why ACE could not change IPs automatically? any special commands required?? I am not sure if the issue is gone when the subnet is terminated in the MSFC. Please let me know your idea. Thanks!
BTW, I knew the routing mode is working properly with us.
