Technical data

ServerIron ADX Firewall Load Balancing Guide 35
53-1002436-01
Configuration examples with Layer 3 routing support
2
DRAFT: BROCADE CONFIDENTIAL
SI-External(config)# server fw-name ip6fw1 1113::2
SI-External(config-rs-fw1)# port http
SI-External(config-rs-fw1)# exit
SI-External(config)# server fw-name ip6fw2 1113::3
SI-External(config-rs-fw2)# port http
SI-External(config-rs-fw2)# exit
SI-External(config)# server fw-group 4 ipv6
SI-External(config-fw-4)# fw-name ip6fw1
SI-External(config-fw-4)# fw-name ip6fw2
SI-External(config-fw-4)# fwall-info 1 8 1113::1 1112::2
SI-External(config-fw-4)# fwall-info 2 9 1113::1 1112::3
SI-External(config-fw-4)# fw-predictor per-service-least-conn
SI-External(config-fw-4)# exit
SI-External(config)# write memory
Commands on the internal ServerIron ADX
ServerIron ADX> enable
ServerIron ADX# configure terminal
ServerIron ADX(config)# hostname SI-Internal
SI-Internal(config)# vlan 10
SI-Internal(config-vlan-10)# untagged ethernet 4/1 to 4/4
SI-Internal(config-vlan-10)# router-interface ve 1
SI-Internal(config-vlan-10)# exit
SI-Internal(config)# interface ve 1
SI-Internal(config-ve-1)# ip address 1113::1/64
SI-Internal(config-ve-1)# exit
SI-Internal(config)# vlan 20
SI-Internal(config-vlan-20)# untagged ethernet 4/5 to 4/24
SI-Internal(config-vlan-20)# router-interface ve 2
SI-Internal(config-vlan-20)# exit
SI-Internal(config)# interface ve 2
SI-Internal(config-ve-2)# ip address 1114::1/64
SI-Internal(config-ve-2)# exit
SI-Internal(config)# ip route 0::/0 ::/0 1113::2
SI-Internal(config)# server fw-name ip6fw1 1113::2
SI-Internal(config-rs-fw1)# port http
SI-Internal(config-rs-fw1)# exit
SI-Internal(config)# server fw-name ip6fw1 1113::3
SI-Internal(config-rs-fw2)# port http
SI-Internal(config-rs-fw2)# exit
SI-Internal(config)# server fw-group 4 ipv6
SI-Internal(config-fw-4)# fw-name ip6fw1
SI-Internal(config-fw-4)# fw-name ip6fw2
SI-Internal(config-fw-4)# fwall-info 1 8 1112::1 1113::2
SI-Internal(config-fw-4)# fwall-info 2 9 1112::1 1113::3
SI-Internal(config-fw-4)# fw-predictor per-service-least-conn
SI-Internal(config-fw-4)# exit
SI-Internal(config)# write memory