Technical data

ManualsBrandsBrocade Communications Systems ManualsHome Theater ServerServerIron ADX 12.4.00

2 ServerIron ADX Firewall Load Balancing Guide

53-1002436-01

Understanding ServerIron FWLB

DRAFT: BROCADE CONFIDENTIAL

TABLE 1 Commands affected by IPv6

Command Definition/Example

[no] server fw-name <name>

<ipv6-addr>

Use this command to configure an IPv6 firewall.

ServerIronADX(config)# server fw-name ip6fw1 1113::2

ServerIronADX(config-rs-ip6fw1)# end

ServerIronADX(config)# server fw-name ip6fw2 1113::3

ServerIronADX(config-rs-ip6fw2)# end

For more information, refer to “Defining the firewalls and adding them to the firewall

group” on page 18.

[no] server fw-group 4 ipv6 Use this command to configure an IPv6 firewall group.

ServerIronADX(config)# server fw-group 4 ipv6

ServerIronADX(config-fw-4)# fw-name ip6fw1

ServerIronADX(config-fw-4)# fw-name ip6fw2

For more information, refer to “Defining the firewalls and adding them to the firewall

group” on page 18.

[no] fwall-info <path-num>

<next-hop-ipv6>

Use this command to configure IPv6 firewall paths.

ServerIronADX(config-fw-4)# fwall-info 1 8 1113::2 1112::2

ServerIronADX(config-fw-4)# fwall-info 2 9 1113::3 1112::3

SI-External(config-fw-4)# fw-predictor

per-service-least-conn

SI-External(config-fw-4)# exit

For more information, refer to “Configuring the paths and adding static MAC entries” on

page 20.

[no] hash-mask <src-ipv6-mask>

<dest-ipv6-mask>

Use this command to configure the destination mask and source mask.

ServerIronADX(config)# server fw-group 4

ServerIronADX(config-fw-4)# hash-mask FFFF:FFFF:FFFF::0

FFFF:FFFF:FFFF::0

ServerIronADX(config-fw-4)# end

For more information, refer to “Overriding the global hash values” on page 172.

[no] show fw hash <src-ipv6-mask>

<dest-ipv6-mask> <firewall group>

Use this command to show the destination mask or source mask.

show fw hash FFFF:FFFF:FFFF::0 FFFF:FFFF:FFFF::0 4

For more information, refer to “Displaying the firewall selected by the hashing process for

load balancing” on page 162.

[no] other-ip <ipv6-addr> Use this command to identify the partner ServerIron ADX’s firewall address.

ServerIronADX(config)# server fw-name ip6fw1 1111::2

ServerIronADX(config-rs-fw1)# other-ip 1112::2

ServerIronADX(config-rs-fw1)# end

For more information, refer to “Configuring active-active HA FWLB” on page 56.

[no] policy-hash-acl <acl-name>

<dest-ipv6-mask> <src-ipv6-mask>

Use this command to configure the destination and source hash mask.

ServerIronADX(config)# server fw-group 4

ServerIronADX(config-fw-4)# policy-hash-acl Ac2

FFFF:FFFF:FFFF:FFFF::0 FFFF:FFFF:FFFF:FFFF::0

ServerIronADX(config-fw-4)# end

For more information, refer to “Overriding the global hash values” on page 172.

[no] show fw-group Use this command to display firewall group details.

ServerIronADX(config)#show fw-group

For more information, refer to “Overriding the global hash values” on page 172.