Technical data

Configuring HA FWLB
May 31, 2012 © 2012 Brocade Communications Systems, Inc. 5 - 13
NOTE: This step is applicable only if you are running a software release earlier than 07.2.20 and the chassis is
using more than one forwarding module.
To display the WSM CPU allocations, enter the show wsm-map command.
To assign all forwarding modules to the same WSM CPU, enter commands such as the following:
ServerIron(config)# wsm wsm-map slot 3 wsm-slot 2 wsm-cpu 1
ServerIron(config)# wsm wsm-map slot 4 wsm-slot 2 wsm-cpu 1
These commands remap processing for the modules in slots 3 and 4 to WSM CPU 1 on the Web Switching
Management Module in slot 2.
Syntax: wsm wsm-map <from-slotnum> wsm-slot <to-slotnum> wsm-cpu <cpunum>
The <from-slotnum> parameter specifies the slot that contains the forwarding module.
The <to-slotnum> parameter specifies the slot that contains the Web Switching Management Module.
The <cpunum> parameter specifies the WSM CPU on <to-slotnum> that will perform the processing. The WSM
CPUs are numbered from 1 – 3.
Enabling FWLB
Enter the following commands at the global CONFIG level to enable FWLB for all TCP and UDP traffic:
ServerIron(config)# ip policy 1 fw tcp 0 global
ServerIron(config)# ip policy 2 fw udp 0 global
ServerIron(config)# write mem
Syntax: [no] ip policy <policy-num> fw tcp | udp 0 global
The <policy-num> value identifies the policy and can be a number from 1 – 64.
Each policy affects TCP or UDP traffic, so you must specify tcp or udp.
The value 0 following the tcp | udp parameter specifies that the policy applies to all ports of the specified type
(TCP or UDP). In this command, “0” is equivalent to “any port number”. For FWLB, you must specify “0”.
Complete CLI Example
The following sections show the CLI commands for configuring the ServerIrons in Figure 5.1.
NOTE: The wsm wsm-map commands in these examples are required only if the chassis is using more than
one forwarding module. Otherwise, do not use this command.
Commands on ServerIron SI-Ext-A
ServerIron> enable
ServerIron# configure terminal
ServerIron(config)# hostname SI-Ext-A
SI-Ext-A(config)# ip address 10.10.1.111 255.255.255.0
SI-Ext-A(config)# ip default-gateway 10.10.1.101
The commands above add a management IP address and default gateway address to the ServerIron. The IP
address must be in the same sub-net as the ServerIron’s interfaces with the Layer 3 firewalls.
SI-Ext-A(config)# trunk switch ethernet 4/5 to 4/6
SI-Ext-A(config)# trunk switch ethernet 4/13 to 4/14
The commands above configure trunk groups for the synchronization link and the additional data link between this
ServerIron and its high-availability partner.
SI-Ext-A(config)# vlan 1
SI-Ext-A(config-vlan-1)# always-active