Technical data

ManualsBrandsBrocade Communications Systems ManualsComputer equipment8/8

Configuring HA FWLB

NOTE: The wsm wsm-map command is required only if the chassis is using more than one forwarding module.

SI-Ext-A(config)# ip policy 1 fw tcp 0 global

SI-Ext-A(config)# ip policy 2 fw udp 0 global

SI-Ext-A(config)# write memory

SI-Ext-A(config)# end

SI-Ext-A# reload

The commands above enable FWLB, save the configuration changes to the startup-config file, and reload the

software.

NOTE: FWLB becomes active as soon as you enable it. However, you must reload the software to place the

trunk group configuration into effect.

Commands on ServerIron SI-Ext-B

ServerIron> enable

ServerIron# configure terminal

ServerIron(config)# hostname SI-Ext-B

SI-Ext-B(config)# ip address 10.10.1.112 255.255.255.0

SI-Ext-B(config)# ip default-gateway 10.10.1.101

SI-Ext-B(config)# trunk switch ethernet 4/5 to 4/6

SI-Ext-B(config)# trunk switch ethernet 4/13 to 4/14

SI-Ext-B(config)# vlan 1

SI-Ext-B(config-vlan-1)# always-active

SI-Ext-B(config-vlan-1)# no spanning-tree

SI-Ext-B(config-vlan-1)# exit

SI-Ext-B(config)# vlan 2 name sync_link by port

SI-Ext-B(config-vlan-2)# untagged ethernet 4/13 to 4/14

SI-Ext-B(config-vlan-2)# no spanning-tree

SI-Ext-B(config-vlan-2)# exit

SI-Ext-B(config)# server fw-port 4/13

SI-Ext-B(config)# server router-ports 4/12

SI-Ext-B(config)# server fw-name FW1 10.10.1.1

SI-Ext-B(config-rs-FW1)# port http

SI-Ext-B(config-rs-FW1)# exit

SI-Ext-B(config)# server fw-name FW2 10.10.1.2

SI-Ext-B(config-rs-FW2)# port http

SI-Ext-B(config-rs-FW2)# server fw-group 2

SI-Ext-B(config-tc-2)# fw-name FW1

SI-Ext-B(config-tc-2)# fw-name FW2

SI-Ext-B(config-tc-2)# sym-priority 1

SI-Ext-B(config-tc-2)# fwall-info 1 4/5 10.10.2.222 10.10.1.1

SI-Ext-B(config-tc-2)# fwall-info 2 4/1 10.10.2.222 10.10.1.2

SI-Ext-B(config-tc-2)# fwall-info 3 4/5 10.10.2.223 10.10.1.1

SI-Ext-B(config-tc-2)# fwall-info 4 4/1 10.10.2.223 10.10.1.2

SI-Ext-B(config-tc-2)# fwall-info 5 4/12 10.10.1.101 10.10.1.101

SI-Ext-B(config-tc-2)# l2-fwall

SI-Ext-B(config-tc-2)# exit

SI-Ext-B(config)# vlan 1

SI-Ext-B(config-vlan-1)# static-mac-address 0050.da8d.5218 ethernet 4/5 priority 1

router-type

SI-Ext-B(config-vlan-1)# static-mac-address 0050.da92.08fc ethernet 4/1 priority 1

router-type

SI-Ext-B(config-vlan-1)# exit

SI-Ext-B(config)# wsm wsm-map slot 3 wsm-slot 2 wsm-cpu 1

SI-Ext-B(config)# wsm wsm-map slot 4 wsm-slot 2 wsm-cpu 1

SI-Ext-B(config)# ip policy 1 fw tcp 0 global

SI-Ext-B(config)# ip policy 2 fw udp 0 global