CSM to ACE - vserver vlan

[ccnhsspine]

Greetings,

Can someone please help converting the following CSM config to ACE config. Need to understand how vlans under vservers would be included for ACE. Also how is the nat client natpool configured on ACE? Thanks.

CSM#

vlan 10 client

ip address 192.168.18.3 255.255.255.0 alt 192.168.18.4 255.255.255.0

!

vlan 11 server

ip address 192.168.18.3 255.255.255.0 alt 192.168.18.4 255.255.255.0

!

natpool POOL_FEtoLOC 111.1.0.1 111.1.0.200 netmask 255.255.255.0

!

serverfarm FARM

nat server

no nat client

real name R1 8090

inservice

real name R2 8090

inservice

!

serverfarm FARM_N

nat server

nat client POOL_FEtoLOC

real name R1 8090

inservice

real name R2 8090

inservice

!

vserver VIP

virtual 192.168.10.6 tcp www

vlan 10

serverfarm FARM

replicate csrp connection

persistent rebalance

inservice

!

vserver VIP_N

virtual 192.168.11.6 tcp www

vlan 11

serverfarm FARM_N

replicate csrp connection

persistent rebalance

inservice

[Gilles Dufour]

with ace the policy [vserver] is configured globally or on the interface vlan.

So, if in your CSM config there is a vlan specified under the vserver, it means you apply the policy to a specific vlan only.

So, in ACE you would have

interface vlan 11

service-policy input VIP_N

interface vlan 10

service-policy input VIP

The client nat function in ace works differently than the CSM.

It's not per serverfarm but per interface/policy.

So, first define the client pool on the outbound interface [interface towards server]

interface vlan x

natpool 1 x.x.x.x ....

Then on your policy, select the natpool

policy-map multimatch VIP_N

class ...

nat dynamic 1 vlan x

But, do you know that ACE comes with a CSM -> ACE config converter onboard ?

Easier than having to figure this out if you don't have time.

Gilles.

[ccnhsspine]

Thanks Gilles. This clarifies things as nat client is not supported on converter.