F3215-HP Load Balancing Module Security Configuration Guide-6PW101

215
Figure 112 Network diagram
Configuration procedure
The following describes only connection limit configuration. For more information about NAT
configuration and internal server configuration, see Network Management Configuration Guide.
# Create a connection limit policy and enter its view.
<LB> system-view
[LB] connection-limit policy 0
# Configure connection limit rule 0 to limit connections from hosts on segment 192.168.0.0/24 to the
external network per source address, with the upper connection limit of 100.
[LB-connection-limit-policy-0] limit 0 source ip 192.168.0.0 24 destination ip any
protocol ip max-connections 100 per-source
# Configure connection limit rule 1 to limit connections from the external network to the DNS server
192.168.0.3/24, with the upper connection limit of 10000.
[LB-connection-limit-policy-0] limit 1 source ip any destination ip 192.168.0.3 32
protocol dns max-connections 10000
# Configure connection limit rule 2 to limit connections from the external network to the Web server
192.168.0.2/24, with the upper connection limit of 10000.
[LB-connection-limit-policy-0] limit 2 source ip any destination ip 192.168.0.2 32
protocol http max-connections 10000
[LB-connection-limit-policy-0] quit
# Apply the connection limit policy.
[LB] connection-limit apply policy 0
Verifying the configuration
# Use the display connection-limit policy command to display the information about the connection limit
policy.
[LB] display connection-limit policy 0
Connection-limit policy 0, refcount 1, 3 limits
limit 0 source ip 192.168.0.0 24 destination ip any protocol ip max-connections 100
per-source
limit 1 source ip any destination ip 192.168.0.3 32 protocol dns max-connections 10000
limit 2 source ip any destination ip 192.168.0.2 32 protocol http max-connections 10000