HP VPN Firewall Appliances High Availability Configuration Guide

205
Item Descri
p
tion
SNAT IP Pool
Configure an SNAT IP address pool.
The option can be set when Enable SNAT is selected. Its default value is the virtual
service IP address.
The start IP address and end IP address must be both configured or both empty, and
the end IP address must be greater than the start IP address.
IMPORTANT:
The SNAT address pool cannot have overlapping address spaces with the address
pool configured for dynamic NAT on the interface that connects the device to the real
server. Otherwise, TCP packet checksum calculation error might occur.
Persistence Method
Select a method for associating real services with connections that access the same
virtual service.
Using a persistence method can reduce times that LB device distributes traffic and
services.
• If you do not select a persistence method, no real services or connections are
associated.
• Source IP—Connections that have the same source address will be associated
with the same real service. In this mode, if the service port number is configured
as any, then any connection with the same source address and protocol type
indicates access of the same real service.
• Source Port—Connections that have the same source port will be associated with
the same real service.
• Destination Port—Connections that have the same destination port will be
associated with the same real service.
• Source IP + Port—Connections that have the same source address and port will
be associated with the same real service.
• Destination IP + Port—Connections that have the same destination address and
port will be associated with the same real service.
Persistence Timeout
Set the aging time of a persistence entry.
When a persistence method is configured, persistence entries are generated
according to the persistence method. If a persistence entry is not matched within the
persistence timeout time, the persistence entry is deleted.
This option is not available if you do not select a persistence method.
Connection Limit Set the maximum number of concurrent connections of the virtual service.
Real Service Group
Reference a real service group for the virtual service.
IMPORTANT:
HP recommends not referencing a real service group with the scheduling algorithm
Least Connections or Weighted Least Connections for the virtual service enabled with
forced load balancing. Otherwise, load balancing might not operate correctly.
Enable Virtual Service
Whether to enable a virtual service after it is configured.
This option is not available if you do not select a real service group.
Displaying server load balancing statistics
1. Select High Reliability > Load Balance > Server Load Balance from the navigation tree.
2. Click Statistics.