Technical data

Firewall Load Balancing Guide
vi © 2012 Brocade Communications Systems, Inc. May 31, 2012
SPECIFYING THE PARTNER PORT ........................................................................................................7-10
S
PECIFYING THE ROUTER PORTS .......................................................................................................7-10
D
EFINING THE FIREWALLS AND ADDING THEM TO THE FIREWALL GROUP ..............................................7-11
C
ONFIGURING PATHS AND ADDING STATIC MAC ENTRIES FOR LAYER 3 FIREWALLS ............................7-12
C
ONFIGURING THE SERVERIRON PRIORITY ..........................................................................................7-14
P
REVENTING LOAD BALANCING OF THE NAT ADDRESSES ...................................................................7-15
C
ONFIGURATION EXAMPLE FOR IRONCLAD FWLB WITH LAYER 3 NAT FIREWALLS .....................................7-15
C
OMMANDS ON ACTIVE SERVERIRON A (EXTERNAL ACTIVE) ...............................................................7-16
A
LTERNATIVE CONFIGURATION FOR ACTIVE SERVERIRON A ................................................................7-18
C
OMMANDS ON STANDBY SERVERIRON A (EXTERNAL STANDBY) .........................................................7-18
A
LTERNATIVE CONFIGURATION FOR STANDBY SERVERIRON A....................................................... 7-19
C
OMMANDS ON ACTIVE SERVERIRON B (INTERNAL ACTIVE) ................................................................7-19
CHAPTER 8
C
ONFIGURING FWLB AND SLB .................................................................. 8-1
CONFIGURING SLB-TO-FWLB ....................................................................................................................8-3
C
ONFIGURING THE SLB PARAMETERS ..................................................................................................8-4
C
ONFIGURING THE REAL SERVERS .......................................................................................................8-4
C
ONFIGURING THE VIRTUAL SERVER ....................................................................................................8-4
B
INDING THE REAL SERVER TO THE VIRTUAL SERVER ...........................................................................8-5
E
NABLING SLB-TO-FWLB ....................................................................................................................8-5
C
ONFIGURATION EXAMPLE FOR SLB-TO-FWLB ...........................................................................................8-5
C
OMMANDS ON SERVERIRON A (EXTERNAL) .........................................................................................8-5
C
OMMANDS ON SERVERIRON B (INTERNAL) ..........................................................................................8-6
C
ONFIGURING FWLB-TO-SLB ....................................................................................................................8-7
C
ONFIGURING THE SLB PARAMETERS ..................................................................................................8-7
C
ONFIGURING THE REAL SERVERS .......................................................................................................8-8
C
ONFIGURING THE VIRTUAL SERVER .............................................................................................. 8-8
B
INDING THE REAL SERVER TO THE VIRTUAL SERVER ...........................................................................8-8
E
NABLING FWLB-TO-SLB ....................................................................................................................8-8
C
ONFIGURATION EXAMPLE FOR FWLB-TO-SLB ...........................................................................................8-9
C
OMMANDS ON SERVERIRON A (EXTERNAL) .........................................................................................8-9
C
OMMANDS ON SERVERIRON B (INTERNAL) ........................................................................................8-10
F
ROM HA CHAPTER .................................................................................................................................8-11
A
CTIVE-ACTIVE FWLB – WITH EXTERNAL SLB (FWLB-TO-SLB) .........................................................8-11
CHAPTER 9
V
IEWING FWLB CONFIGURATION
DETAILS AND STATISTICS............................................................................ 9-1
DISPLAYING FIREWALL GROUP INFORMATION ...............................................................................................9-1
TCP/UDP P
ORT STATISTICS ................................................................................................................9-2
D
ISPLAYING FIREWALL PATH INFORMATION .................................................................................................9-4
D
ISPLAYING THE FIREWALL SELECTED BY THE HASHING PROCESS FOR LOAD BALANCING ............................9-7