Cisco® ACE Application Control Engine Software Release A5(1.0) delivers IPv6 capabilities on the Cisco ACE30 Module and the Cisco ACE4710 Appliance, allowing customers to seamlessly migrate their networks as the demand for IPv6 traffic increases. To facilitate provisioning and end-to-end management of all new features, Cisco ACE Software Release A5(1.0) is also supported by the Cisco Application Network Manager (ANM) 5.1 management platform.
New Features in Cisco ACE Software Release A5(1.0)
Cisco ACE Software Release A5(1.0) adds to existing features in the Cisco ACE A4(2.x) software and supports a unified architecture across the Cisco ACE30 Module and Cisco ACE4710 Appliance. It is not supported on the Cisco ACE10 or ACE20 Modules, and consequently there is no IPv6 support available or planned for these platforms.
Table 1 summarizes the new features in Cisco ACE Software Release A5(1.0).
Table 1. Cisco ACE Software Release A5(1.0) Features
IPv6 server load balancing (SLB) and baseline features
All current capabilities on the Cisco ACE platforms, including load-balancing and context-switching capabilities, are now expanded to work in an IPv6 network, including support for:
• IPv6 interfaces, VIPs and server farms
• IPv6-based predictors and persistence
• IPv6-based probes for health monitoring
• IPv6-based Source NAT and extended ACLs
• IPv6-based static routes
• SSL, including client certificate authentication
• CLI support for IPv6
Extends all current L4 through L7 capabilities on the Cisco ACE platforms to work in an IPv6-enabled network
Dual-Stack IPv4 and IPv6 implementation
• A dual-stack approach to IPv6 enables Cisco ACE to support both IPv4-to-IPv4 and IPv6-to-IPv6 load balancing
• Cisco ACE also supports IPv6 to IPv4 translation (bidirectional)
• All deployment models (one-armed, routed, bridge mode, NAT, DSR) are supported with very little loss of performance for IPv4 traffic.
Allows customers to gradually transition their networks to IPv6 as demand for IPv6 increases
IPv6 protocol support
The protocols supported by the Cisco ACE in an IPv6 network environment include HTTP, HTTPS, and SSL
Provides load-balancing and context-switching capabilities for all web applications running in an IPv6 network
End-to-end IPv6 management (including provisioning, monitoring, and troubleshooting) is supported through IPv4 management interfaces by the following:
• Cisco ANM 5.1, through an intuitive web-based GUI
• The Device Manager (DM) on the Cisco ACE 4710 appliance, through a web-based GUI
• ACE XML interface
Allows provisioning and end-to-end management of the solution through easy-to-use GUI-based tools
The IPv6 implementation on the Cisco ACE platforms complies with:
• USGv6 certification
• IPv6 Ready Logo Phase 2 certification
Meets certification requirements of U.S. federal and other government agencies
Online Certificate Status Protocol (OCSP) v4 and v6 support
Cisco ACE provides RFC 2560-compliant support for OCSP. Up to 64 OCSP servers can be configured on the device in addition to the mechanism to extract OCSP server information from the certificate itself. Use of OCSP does not preclude use of current certificate revocation list (CRL) functionality
Saves the Cisco ACE control plane from computation-intensive certificate revocation validation processing and caching of CRLs
The base IPv6 functionality is available to customers at no additional charge. This functionality enables traffic management capabilities for IPv6 traffic similar to those currently available for IPv4 traffic. For deployments in mixed networks with translation between IPv6 and IPv4, customers are required to purchase additional software depending on the underlying hardware platform.
Table 2 provides ordering information for Cisco ACE Software Release A5(1.0).
Table 2. Ordering Information
ACE SW A5(1) for ACE30 Module
ACE SW A5(1) for ACE4710 Appliance
ACE SW A5(1) for ACE30 Module v6-v4 translation
ACE SW A5(1) for ACE4710 Appliance v6-v4 translation
ACE SW A5(1) for ACE30 Module v6-v4 translation SPARE
ACE SW A5(1) for ACE4710 Appliance v6-v4 translation SPARE
Cisco ACE Software Release A5(1.0) supports upgrades from all versions of Cisco ACE Software Release 4.x. Existing Cisco ACE customers running Release 4.x software are eligible for an upgrade without charge to Release A5(1.0).