Technical data

ServerIron ADX Firewall Load Balancing Guide 43
53-1002436-01
Configuring HA active-active FWLB
3
DRAFT: BROCADE CONFIDENTIAL
Configuring the partner port
Use the partner-ports command to configure the data link between the ServerIron and its
active-active partner. You must use the server partner-ports command to specify all data links with
the partner. To specify the partner port, enter the following command.
NOTE
Do not use the partner-ports command for the synchronization link.
SI-Ext-A(config)# server partner-ports ethernet 3/1
Syntax: [no] server partner-ports <portnum>
Configuring the additional data link (the always-active link)
The default port-based VLAN, VLAN 1, contains all the ServerIron ADX ports by default. In
configurations such as the one shown in
Figure 10 on page 40, the ports of the additional data link
between the ServerIron ADXs in each pair also are in this VLAN. For this type of configuration, you
must perform the following configuration steps for the default VLAN:
• Disable the Spanning Tree Protocol (STP)
• Enable the always-active option
To disable STP and enable the always-active feature, enter the following commands.
ServerIronADX(config)# vlan 1
ServerIronADX(config-vlan-1)# no spanning-tree
ServerIronADX(config-vlan-1)# always-active
ServerIronADX(config-vlan-1)# exit
Syntax: [no] vlan <num>
Syntax: [no] spanning-tree
Syntax: [no] always-active
NOTE
To use the always-active feature, you also must enable the L2-fwall feature at the firewall group
configuration level.