Technical data

ServerIron ADX Firewall Load Balancing Guide 169
53-1002436-01
Customizing path health checks
A
DRAFT: BROCADE CONFIDENTIAL
Customizing path health checks
This appendix describes the health checks for firewall and router paths and how to change their
configuration.
By default, the ServerIron ADX checks the health of each firewall and router path by sending an
ICMP ping on the path every 400 milliseconds. Consider the following to determine the router path:
• If the ServerIron ADX receives one or more responses within 1.2 seconds, the ServerIron ADX
concludes that the path is healthy.
• Otherwise, the ServerIron ADX reattempts the health check by sending another ping. By
default, the ServerIron ADX reattempts an unanswered path health check up to three times
before concluding that the path is unhealthy.
You can change the maximum number of retries for the Layer 3 health checks of firewall and router
paths. You also can enable Layer 4 path health checks for the firewall paths.
NOTE
This chapter describes how to configure path health checks but not application health checks. To
configure a Layer 4 or Layer 7 application health check, use the procedures in the "Health Checks"
chapter in the ServerIron Server Load Balancing Guide. The command syntax and behavior of Layer
4 and Layer 7 health checks is the same regardless of whether you are configuring them for SLB,
TCS, or FWLB.
Changing the maximum number of Layer 3 path health-check retries
By default, the ServerIron ADX checks the health of each firewall and router path by sending an
ICMP ping on the path every 400 milliseconds:
• If the ServerIron ADX receives one or more responses within 1.2 seconds, the ServerIron ADX
concludes that the path is healthy.
• Otherwise, the ServerIron ADX reattempts the health check by sending another ping. By
default, the ServerIron ADX reattempts an unanswered path health check up to three times
before concluding that the path is unhealthy.
You can change the maximum number of retries to a value from 3 through 31.
To change the maximum number of FWLB path health check attempts, enter a command such as
the following at the firewall level of the CLI.
ServerIronADX(config-fw-2)# fw-health-check icmp 20
Syntax: [no] fw-health-check icmp <num>
The <num> parameter specifies the maximum number of retries and can be a number from 3
through 31. The default is 3.