CiscoACE to F5 Big IP LTM migration
Hi, I'm upgrading from Cisco ACE to BigIP LTM. My Cisco devices are in bridge mode, so I have to keep that config for LTM. With the BigIP LTM I have done all my tests using a separate partition (other than Common). In this partition I have a VLAN group with two members (external and internal) and bridging enabled. External and Internal interfaces are not tagged. Everything works as expected. Since I have few contexts in the Cisco ACE I have to create Partitions and RDs to match with the number of contexts. I have tagged the interfaces based on the tagging I already have on the network, and create a VLAN group for each Partition. The switch ports where LTM interfaces are connected are set for trunk mode (Cisco) with dot1q encapsulation since they have to support multiple VLAN. When I do this it creates a loop and STP blocks one the ports (either the one corresponding to the external or internal interface of the LTM). I've been looking through the manuals, and as well on questions on dev central but I did not find anything similar. Did anybody encountered this issue or if you know of any document, white-paper, Q and A that cover this scenario? Any input is greatly appreciated. Thanks
TCP payload persistence (convert Cisco ACE l4-payload stickiness)
Hi all, I'm currently transforming lots of Cisco ACE configurations to Big IPs running 11.6.0. On the ACE, there is a sticky method called "l4-payload" which can use a fixed offset and length setting in order to grab a specific portion of the TCP payload and generate a sticky entry based on that string (see http://www.cisco.com/c/en/us/td/docs/interfaces_modules/services_modules/ace/vA5_1_0/command/reference/ACE_cr/sticky.htmlwp1040212) For example, I have the following sticky setting on the ACE that I need to convert to bigIP: sticky layer4-payload my_l4_stickiness layer4-payload offset 30 length 20 serverfarm my_serverfarm timeout 1 replicate sticky Which approach would you suggest? I think, I will need a combined iRule and universal persistence in order to achieve the same on the BigIP. Has anybody built something like that already? Any help is appreciated. Thanks in advance! Regards MartinVirtual Servers on Loopback Network
All, I am doing a conversion from Cisco ACE to F5, and the ACE is configured in such a way that the VIP network is defined as a loopback interface, so it doesn't exist as a real VLAN on the wire. The upstream router has a point-to-point routed link to the ACE and has a static route for the VIP network to go to the ACE's routed interface. I am trying to duplicate this configuration on F5, and I have successfully created a loopback interface and created virtual servers that are IP addresses on the loopback network. Are there any downsides or problems with doing it this way that I should be aware of? Thanks, Clay