Technical data

Configuring HA FWLB
May 31, 2012 © 2012 Brocade Communications Systems, Inc. 5 - 27
commands in this example assign traffic on the forwarding modules in slots 3 and 4 to WSM CPU 1 on the Web
Switching Management Module in slot 2.
SI-Ext-A(config)# wsm wsm-map slot 3 wsm-slot 2 wsm-cpu 1
SI-Ext-A(config)# wsm wsm-map slot 4 wsm-slot 2 wsm-cpu 1
NOTE: For simplicity, the configuration of the other ServerIrons in this example do not include wsm wsm-map
commands. However, the commands you need to enter depend on the slot locations of the modules in the device
and the WSM CPU you want to use.
The following commands enable FWLB.
SI-Ext-A(config)# ip l4-policy 1 fw tcp 0 global
SI-Ext-A(config)# ip l4-policy 2 fw udp 0 global
The following commands configure the VRRP parameters. The address indicated by the ip-address command
(10.10.6.111) is the address that will be backed up by VRRP. Since this ServerIron is the owner of the backed up
address, the address is configured on the port (this port owns the address) and the address is assigned to the
VRID. On external ServerIron B, the VRID will be configured as a backup for 10.10.6.111. The port on which the
VRID is configured will have an IP address that is in the same sub-net as the backed up address, but not the same
address.
ServerIronA(config)# router vrrp
ServerIronA(config)# interface ethernet 4/12
ServerIronA(config-if-4/12)# ip address 10.10.6.111/24
ServerIronA(config-if-4/12)# ip vrrp vrid 1
ServerIronA(config-if-4/12-vrid-1)# owner
ServerIronA(config-if-4/12-vrid-1)# ip-address 10.10.6.111
ServerIronA(config-if-4/12-vrid-1)# activate
ServerIronA(config-if-4/12-vrid-1)# exit
ServerIronA(config-if-4/12)# exit
The following command saves the configuration changes to the startup-config file.
SI-Ext-A(config)# write memory
Commands on External ServerIron B (SI-Ext-B)
Here are the commands for configuring SI-Ext-B. The SLB configuration is identical to the one on SI-Ext-A.
ServerIron> enable
ServerIron# configure terminal
ServerIron(config)# hostname SI-Ext-B
SI-Ext-B(config)# vlan 1
SI-Ext-B(config-vlan-1)# always-active
SI-Ext-B(config-vlan-1)# no spanning-tree
SI-Ext-B(config-vlan-1)# router-interface ve 1
SI-Ext-B(config-vlan-1)# exit
SI-Ext-B(config)# interface ve 1
SI-Ext-B(config-ve-1)# ip address 10.10.1.112 255.255.255.0
SI-Ext-B(config-ve-1)# exit
SI-Ext-B(config)# ip route 0.0.0.0 0.0.0.0 10.10.1.1
SI-Ext-B(config)# vlan 2
SI-Ext-B(config-vlan-2)# untag ethernet 4/12
SI-Ext-B(config-vlan-2)# exit
SI-Ext-B(config)# trunk switch ethernet 3/5 to 3/6
SI-Ext-B(config)# vlan 10
SI-Ext-B(config-vlan-10)# untagged ethernet 3/5 to 3/6
SI-Ext-B(config-vlan-10)# exit
SI-Ext-B(config)# server fw-port 3/5
SI-Ext-B(config)# server partner-ports ethernet 3/1
SI-Ext-B(config)# server fw-name fw1 10.10.1.1
SI-Ext-B(config-rs-fw1)# port http