I am currently replacing the combination of an FWSM and ACE-30 out of a Catalyst 6500 chassis with a bunch of F5 AFM/LTM's.
Now, by history of the company the current implementation looks similar to this Layer 2 configuration of ACEs.
The FWSM are serving as Gateway, the same subnet / IP range is spread over two Vlan ID's, the client facing Vlan ID or "shared vlan" and the server facing vlan ID which extends out of the 6500 chassis.
The VIP address lives on the ACE-30's while the rServers are located in the Server facing Vlans.
Now I am particularly interested in the shared vlans and vlan group configuration:
The question really is, if I can extend the Vlan IDs out of the Catalyst 6500 chassis which are used as shared Vlans between the FWSM and the ACE-30 which are both chassis based modules within the same 6500 as show below:
Is this a valid design? Or basically, will this work?
How do I reflect that design in IOS?
The overall idea is pretty much to first replace the FWSM with the F5 AFM functionality on a per FWSM context level, and then once after migrating on a per Vlan basis the ACE or F5 LTM side of things within a given FWSM context.
Now the only part I really need to know is, can I extend the shared Vlan ID out of the 6500 without walking into some fun?
Also, this state may remain for a period of 1-2 month, depending on the customers preferences on speed/delivery.
ok, sorry I did not give you all the background / details, so let me quickly brief you on what I intend to do and then where my question fits it again.
Replacing the FWSM part, while keeping the ACE-30 still performing the load balancing.
(Converting a couple lines of ACLs into F5 AFM language is "relatively" easy, will require F5's professional services, conversion tool, a couple of days work and should be done... sounds easy.. I will tell you later on how that went once done :)
But that's what I consider the easier part.
This is the part where we remove the ACE-30's.
Here I basically have de-associated the Server facing Vlan from the ACE-30 and pulled it back onto the Catalyst 6500 chassis, while extending it out of the Cat 6500 towards server switches as the rServer usually live on VM's or where ever.
The origninal question I had is, actually on Step 1, where I have the AFM part done, and I am bridging the shared vlan between the ACE-30 and then instead of pointing to the front to the FWSM, I intend to bridge it out of the chassis towards the F5 as shown below in this diagram:
Step 1 Detail:
Step 1 - view when completed:
STEP 2.1 Detail (replacing the ACE-30's on a per vlan case):
Disabling the ACE-30 on a per Vlan Basis, basically picking which Vlans we will do the ACE/LTM changes one at a time:
Step 2.1 : De-Associate Vlan B from ACE-30 / Catalyst 6500 binding.