promiscuous vip settings physical vs VE

Posted by ddesmidt

On AX you can configure your IP@ on: . “interface” . “ve”

If you configure your IP@: . Case1: on “interface” Configure “ip allow-promiscuous-vip” on the “interface” to have the interface listening for wildcard VIP

. Case2: on “ve” Configure “ip allow-promiscuous-vip” on the “ve” to have the interfaces in the “ve” listening for wildcard VIP Note: You don’t have to do “ip allow-promiscuous-vip” on the interfaces too. Now if you do it, that won’t harm.

Important Side Note: Before 2.6.1, it is STRONGLY recommended to configure AX data IP@ on “ve” if you have multiple interfaces connected to avoid loop. Indeed before 2.6.1 all interfaces are part of the default VLAN 1. Even if you assign IP@ on the “interfaces” they are still part of VLAN 1 => layer2 packets such as spanning tree packets will be forwarded between AX “interfaces”. Assigning “interfaces” in “ve” removes the interfaces from the default VLAN 1 => removes the forwarding between interfaces. From 2.6.1, when you configure an IP@ on an “interface”, that “interface” is removed from the default VLAN 1.