R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

464
round-trip min/avg/max = 2/2/2 ms
BGP load balancing configuration at the CLI
Network requirements
This example describes how to configure BGP load balancing.
As shown in Figure 286, all fir
ewalls run BGP, and Firewall A resides in AS 65008, Firewall B and
Firewall C in AS 65009. Between Firewall A and Firewall B, Firewall A and Firewall C are EBGP
connections, and between Firewall B and Firewall C is an IBGP connection. Two routes are configured on
Firewall A for load balancing.
Figure 286 Network diagram
Configuration procedure
1. Configure IP addresses for interfaces. (Details not shown)
2. Configure BGP connections:
{ On Firewall A, establish EBGP connections with Firewall B and Firewall C respectively;
configure BGP to advertise network 8.1.1.0/24 to Firewall B and Firewall C, so that Firewall B
and Firewall C can access the internal network connected to Firewall A.
{ On Firewall B, establish an EBGP connection with Firewall A and an IBGP connection with
Firewall C; configure BGP to advertise network 9.1.1.0/24 to Firewall A, so that Firewall A can
access the intranet through Firewall B; configure a static route to interface loopback 0 on
Firewall C (or use a routing protocol like OSPF) to establish the IBGP connection.
{ On Firewall C, establish an EBGP connection with Firewall A and an IBGP connection with
Firewall B; configure BGP to advertise network 9.1.1.0/24 to Firewall A, so that Firewall A can
access the intranet through Firewall C; configure a static route to interface loopback 0 on
Firewall B (or use another protocol like OSPF) to establish the IBGP connection.
# Configure Firewall A.
<FirewallA> system-view
[FirewallA] bgp 65008
[FirewallA-bgp] router-id 1.1.1.1
[FirewallA-bgp] peer 3.1.1.1 as-number 65009
[FirewallA-bgp] peer 3.1.2.1 as-number 65009
[FirewallA-bgp] network 8.1.1.1 24