cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
838
Views
5
Helpful
1
Replies

Routing external traffic on ACE Module (Bridge Mode) with Multiple BVIs

I am having a problem routing back to external internet traffic from VIPs located on web facing Bridged VLANs. Here is the issue, and it is probably an easy fix, but this is the first time implementing a Transparent LB.

The ACE module is sitting in bridged mode on  a 6506 switch. I have two SVIs created on the MSFC, lets call them vlan 101 and 201.

VLAN 101 - ip address 10.10.101.1

VLAN 201 - ip address 10.10.201.1

One the ACE i have two BVI built for each vlan on the MSFC

BVI1 bridges 101 to 2101

BVI2 bridges 201 to 2201

There are VIPs created on both vlan 101 and 201. Since I have two BVIs on the ACE, how can I make sure that traffic routing back out to the internet is going to the right gateway. Meaning, if traffic is being initiated from the internet and destined to the VIP on vlan 101, how can I make sure that the reply traffic from the VIP is being routed to the 10.10.101.1 gateway?

The reason I ask is because the ACE, although transparent, still needs a route for traffic to and from itself.....right??? And if I have a 0.0.0.0 route pointing to 10.10.101.1 and another pointing to 10.10.201.1, I see intermittent connectivity.

Is there a way to make sure that traffic coming in one vlan interface, gets replied to back out the same interface. For example, when traffic is initiated from the internet to the VIP on vlan 101, the reply traffic must route back out vlan 101, and when traffic is initiated from the internet to the VIP on vlan 201, the reply traffic must route back out vlan 201????

1 Reply 1

looks like if you apply the "mac-sticky enable" command to the client side vlan interface it fixes the issues.

Review Cisco Networking for a $25 gift card