Basic L2 bridge troubleshooting ACE

Question

Hi,
I have a strange behaviour on new ace module :
I have a Dmz in bridge mode, I have installed a server on it with a simple web server, I first try to simple connect to this web server just being bridge between client and server.
Sometimes it works just fine, sometimes the tcp connection to 80 doesn't work.
When it doesn't work, the ACE does a icmp echo resquest to the source using it's IP.
The ping always works well.
Do you see anything in the config that is wrong or that I shoud add ?
here is the config :
interface bvi 1
ip address a.a.a.a 255.255.255.224
peer ip address a.a.a.b 255.255.255.224
description Bridge address for Dmz
no shutdown
interface vlan 454
bridge-group 1
no normalization
mac-sticky enable
no icmp-guard
access-group input Any
service-policy input PM_MM_454_VIP
service-policy input TCP_Connection_Timeout
no shutdown
interface vlan 554
bridge-group 1
no normalization
no icmp-guard
access-group input Any
service-policy input TCP_Connection_Timeout
no shutdown
Thanks

Answer 1

Hello Gilles,
If in a context you have many bridge group, how can you configure a route for each ?
on the csm, there was the gateway command, I though here the mac-sticky replaced that.
here is the arp table on the context :
85.91.161.65 00.50.5a.5b.a1.41 vlan454 LEARNED 17 9121 sec up IS the DG
85.91.161.70 00.08.02.94.9d.27 vlan554 LEARNED 24 9121 sec up Is the server
I tried now and even if the mac is in the arp table it doesn't work.
I have upgraded the blade to 3.0.0_A1_6_3b
I will look at the arp table when it works.
And here I am simply trying to connect to the server, there is no service defined on the ACE for LB and ICMP is sent to the server correctly.
Also the mac address table doesn't change even if it works for someone else.
so PC1 - server on port 80 ok
pc2 - server on port 80 nok
and then for no reason it doesn't work anymore for the first too.
Thanks,
Luc