Manualshelf

Technical data

ManualsBrandsBrocade Communications Systems ManualsHome Theater ServerServerIron ADX 12.4.00
151152153154155156157158159160
ServerIron ADX Firewall Load Balancing Guide 141
53-1002436-01
Configuring FWLB-to-SLB
6
DRAFT: BROCADE CONFIDENTIAL
ServerIronADXA(config)# static-mac-address abcd.4321.34e0 ethernet 3 priority 1
router-type
ServerIronADXA(config)# static-mac-address abcd.4321.34e1 ethernet 5 priority 1
router-type
ServerIronADXA(config)# write memory
Commands on ServerIron B (internal)
Enter the following commands to configure FWLB on ServerIron B. Notice that the fwall-info
commands configure paths that are reciprocal to the paths configured on ServerIron A. Path 1 on
each ServerIron goes through one of the firewalls while path 2 goes through the other firewall.
ServerIronADXB(config)# server fw-name FW1-IPout 192.168.2.30
ServerIronADXB(config-rs-FW1-IPout)# exit
ServerIronADXB(config)# server fw-name FW2-IPout 192.168.2.40
ServerIronADXB(config-rs-FW2-IPout)# exit
ServerIronADXB(config)# server fw-group 2
ServerIronADXB(config-fw-2)# fw-name FW1-IPout
ServerIronADXB(config-fw-2)# fw-name FW2-IPout
ServerIronADXB(config-fw-2)# fwall-info 1 1 192.168.1.100 192.168.2.30
ServerIronADXB(config-fw-2)# fwall-info 2 2 192.168.1.100 192.168.2.40
ServerIronADXB(config-fw-2)# exit
ServerIronADXB(config)# static-mac-address abcd.4321.34e2 ethernet 1 priority 1
router-type
ServerIronADXB(config)# static-mac-address abcd.4321.34e3 ethernet 2 priority 1
router-type
ServerIronADXB(config)# write memory
Configuring FWLB-to-SLB
Configuration for FWLB-to-SLB is similar to configuration for SLB-to-FWLB, with the following
differences:
• SLB configuration information resides on the internal ServerIron ADX, not on the Internet
ServerIron ADX.
• The FWLB-to-SLB feature is enabled on the internal ServerIron ADX.
• If Proxy ARP is enabled on the internal router, you can define the real servers as local servers
instead of remote servers. However, if Proxy ARP is not enabled on the internal router, the real
servers must be remote servers.
To configure FWLB-to-SLB in a basic FWLB configuration for Layer 3 firewalls, such as the one
shown in
Figure 21 on page 137, perform the following tasks:
• Configure SLB parameters on the internal ServerIron:
- Configure the real servers
- Configure the virtual server
- Bind the real servers to the virtual server
- Enable the FWLB-to-SLB feature
• Configure global FWLB parameters