loadbalancing with out changing my server gateway to ACE IP

[ranjith.kanisan]

Hi,

We are using cisco 6509 switch with FWSM and ACE module.

We have created interface VLAN 6 in FWSM and ACE and assigned the IP as follows.

FWSM Interface VLAN 6 is 10.6.10.55 and ACE Interfce VLAN 6 is 10.6.10.60.

We have 2 servers in the same vlan (.49 and .50). and they are physicaly connected to switch vlan 6 and logicaly connected to FWSM interface vlan 6.

We have defined the VIP as 10.6.10.51 and that is not pinging from our network.

Server default gateway and ACE default gateway is FWSM interface vlan 6 IP(ie, 10.6.10.55).

We dont want to change the server gateway as ACE interface vlan 6 ip.

KIndly suggest how can i achive the loadbalancing with out changing my server gateway to ACE IP.

Thanks in advance.

Regards,

Ranjith

[cpomeroy · Accepted solution]

Ranijith,

    When doing load balancing the key is that reply from the server return to the ACE so that the ACE can complete the nat.  There are 3 ways to do this 1) routed mode 2) bridge mode 3) one-armed mode.    If you don't want the server gateway to be the ace, then that leaves bridge mode and one-armed mode.   The simplest would be to use one-armed mode.  Here is an example how it works.

http://docwiki.cisco.com/wiki/Basic_Load_Balancing_Using_One_Arm_Mode_with_Source_NAT_on_the_Cisco_Application_Control_Engine_Configuration_Example

Thanks,

Chris

[ranjith.kanisan]

thanks christopher..