Technical data

126 ServerIron ADX Firewall Load Balancing Guide
53-1002436-01
Configuring IronClad Layer 3 FWLB for NAT
5
DRAFT: BROCADE CONFIDENTIAL
Commands for standby ServerIron ADX A (external standby)
SI-StandbyA(config)# server fw-group 2
SI-StandbyA(config-fw-2)# fwall-info 1 1 3.3.3.20 192.168.2.2
SI-StandbyA(config-fw-2)# fwall-info 2 2 3.3.3.20 192.168.2.3
SI-StandbyA(config-fw-2)# fwall-info 3 1 4.4.4.20 192.168.2.2
SI-StandbyA(config-fw-2)# fwall-info 4 2 4.4.4.20 192.168.2.3
SI-StandbyA(config-fw-2)# fwall-info 5 8 192.168.2.1 192.168.2.1
SI-StandbyA(config-fw-2)# exit
SI-StandbyA(config)# static-mac-address abcd.4321.a53d ethernet 2 priority 1
router-type
SI-StandbyA(config)# static-mac-address abcd.4321.2499 ethernet 1 priority 1
router-type
Commands for active ServerIron ADX B (internal active)
SI-ActiveB(config)# server fw-group 2
SI-ActiveB(config-fw-2)# fwall-info 1 1 192.168.2.10 4.4.4.10
SI-ActiveB(config-fw-2)# fwall-info 2 2 192.168.2.10 4.4.4.11
SI-ActiveB(config-fw-2)# fwall-info 3 1 192.168.1.10 4.4.4.10
SI-ActiveB(config-fw-2)# fwall-info 4 2 192.168.1.10 4.4.4.11
SI-ActiveB(config-fw-2)# fwall-info 5 8 4.4.4.30 4.4.4.30
SI-ActiveB(config-fw-2)# exit
SI-ActiveB(config)# static-mac-address abcd.4321.249b ethernet 1 high-priority
router-type
SI-ActiveB(config)# static-mac-address abcd.4321.a53f ethernet 2 high-priority
router-type
Commands for standby ServerIron ADX B (internal standby)
SI-StandbyB(config)# server fw-group 2
SI-StandbyB(config-fw-2)# fwall-info 1 1 192.168.1.10 3.3.3.10
SI-StandbyB(config-fw-2)# fwall-info 2 2 192.168.1.10 3.3.3.11
SI-StandbyB(config-fw-2)# fwall-info 3 1 192.168.2.10 3.3.3.10
SI-StandbyB(config-fw-2)# fwall-info 4 2 192.168.2.10 3.3.3.11
SI-StandbyB(config-fw-2)# fwall-info 5 8 3.3.3.30 3.3.3.30
SI-StandbyB(config-fw-2)# exit
SI-StandbyB(config)# static-mac-address abcd.4321.a53e ethernet 2 priority 1
router-type
SI-StandbyB(config)# static-mac-address abcd.4321.249a ethernet 1 priority 1
router-type
Syntax: server fw-group 2 | 4
This command changes the CLI to the firewall group configuration level. The IPv4 address format
firewall group number is 2. The IPv6 address format firewall group number is 4. These are the only
supported firewall groups.