Difference between ACE configuration

[fabio.marino]

Hi,

I have two ACE that are configured both in One Arm Mode but using diffent configuration

In the first case I have

Firewall ---------Switch ---------------- Load Balancer ---

                                     X.X.X.X                                Y.Y.Y.Y

X.X.X.X. is a transfer network used to allow the LB to route the Server Traffic back to the switch

Y.Y.Y.Y is the VIP network. In the LB no vlan interfaces have been created using IP in this network.

In the second case I have:

Firewall ---------Switch ---------------- Load Balancer

                                      Z.Z.Z.Z        

Z.Z.Z.Z is the VIP Newtwork and is used for Server Traffic as well.

Make it sense for you?

Which are vantages and disvantages of the proposed configuration?

Thanks.

[chrhiggi]

Fabio-

  It doesn't matter in either one.  You can either send traffic directly to an ACE vip as a L2 adjacent address to the upstream gateway, or you could route it in (you could even use RHI on ACE to simplify configuration)  The only difference is the MAC address the traffic is sent to.  Otherwise, there are no performance or other reasons to choose either design.

Regards,

  Chris Higgins

  ANS TAC Escalation