F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100

510
round-trip min/avg/max = 2/2/2 ms
721BBGP load balancing configuration example
1526BNetwork requirements
As shown in 2702HFigure 298, all routers run BGP, Firewall resides in AS 65008, and Router B and Router A
reside in AS 65009. EBGP runs between Firewall and Router B, and between Firewall and Router C.
IBGP runs between Router B and Router A. Configure two routes on Firewall for load balancing.
Figure 298 Network diagram
1527BConfiguration considerations
On Firewall, establish EBGP connections with Router B and Router A, respectively; configure BGP to
a d v e r t i s e n e t w o r k 8 .1.1.0 / 24 t o R o u t e r B a n d R o u t e r A , so Router B and Router A can access the internal
network connected to Firewall.
On Router B, establish an EBGP connection with Firewall and an IBGP connection with Router A;
configure BGP to advertise network 9.1.1.0/24 to Firewall, so Firewall can access the intranet through
Router B; configure a static route to interface loopback 0 on Router A (or use a routing protocol like OSPF)
to establish the IBGP connection.
On Router A, establish an EBGP connection with Firewall and an IBGP connection with Router B;
configure BGP to advertise network 9.1.1.0/24 to Firewall, so Firewall can access the internal network
through Router A; configure a static route to interface loopback 0 on Router B (or use another protocol
like OSPF) to establish the IBGP connection.
1528BConfiguration procedure
1. Configure IP addresses for interfaces. (Details not shown.)
2. Configure BGP connections:
# Configure Firewall.
<Firewall> system-view
[Firewall] bgp 65008
[Firewall-bgp] router-id 1.1.1.1
[Firewall-bgp] peer 3.1.1.1 as-number 65009
[Firewall-bgp] peer 3.1.2.1 as-number 65009
[Firewall-bgp] network 8.1.1.1 24
[Firewall-bgp] quit