Technical data
Configuring Multizone FWLB
May 31, 2012 © 2012 Brocade Communications Systems, Inc. 6 - 23
Zone1-SI-A(config)# ip l4-policy 1 fw tcp 0 global
Zone1-SI-A(config)# ip l4-policy 2 fw udp 0 global
The following command saves the configuration changes to the startup-config file.
Zone1-SI-A(config)# write memory
Commands on Zone 1’s Standby ServerIron (Zone1-SI-S)
ServerIron> enable
ServerIron# configure terminal
ServerIron(config)# hostname Zone1-SI-S
Zone1-SI-S(config)# vlan 1
Zone1-SI-S(config-vlan-1)# always-active
Zone1-SI-S(config-vlan-1)# no spanning-tree
Zone1-SI-S(config-vlan-1)# router-interface ve 1
Zone1-SI-S(config-vlan-1)# exit
Zone1-SI-S(config)# interface ve 1
Zone1-SI-S(config-ve-1)# ip address 10.10.1.112 255.255.255.0
Zone1-SI-S(config-ve-1)# exit
Zone1-SI-S(config)# ip route 0.0.0.0 0.0.0.0 10.10.1.2
Zone1-SI-S(config)# no ip icmp redirects
Zone1-SI-S(config)# vlan 10
Zone1-SI-S(config-vlan-10)# untagged ethernet 4/9 to 4/10
Zone1-SI-S(config-vlan-10)# exit
Zone1-SI-S(config)# trunk switch ethernet 4/9 to 4/10
Zone1-SI-S(config)# server fw-port 4/9
Zone1-SI-S(config)# trunk switch ethernet 4/11 to 4/12
Zone1-SI-S(config)# server partner-ports ethernet 4/11
Zone1-SI-S(config)# server partner-ports ethernet 4/12
Zone1-SI-S(config)# server fw-group 2
Zone1-SI-S(config-tc-2)# l2-fwall
Zone1-SI-S(config-tc-2)# exit
Zone1-SI-S(config)# server fw-name fw1 10.10.1.1
Zone1-SI-S(config-rs-fw1)# port http
Zone1-SI-S(config-rs-fw1)# port http no-health-check
Zone1-SI-S(config-rs-fw1)# port ftp
Zone1-SI-S(config-rs-fw1)# port ftp no-health-check
Zone1-SI-S(config-rs-fw1)# port snmp
Zone1-SI-S(config-rs-fw1)# port snmp no-health-check
Zone1-SI-S(config-rs-fw1)# exit
Zone1-SI-S(config)# server fw-name fw2 10.10.1.2
Zone1-SI-S(config-rs-fw2)# port http
Zone1-SI-S(config-rs-fw2)# port http no-health-check
Zone1-SI-S(config-rs-fw2)# port ftp
Zone1-SI-S(config-rs-fw2)# port ftp no-health-check
Zone1-SI-S(config-rs-fw2)# port snmp
Zone1-SI-S(config-rs-fw2)# port snmp no-health-check
Zone1-SI-S(config-rs-fw2)# exit
Zone1-SI-S(config)# server fw-group 2
Zone1-SI-S(config-tc-2)# fw-name fw1
Zone1-SI-S(config-tc-2)# fw-name fw2
Zone1-SI-S(config-tc-2)# sym-priority 1
Zone1-SI-S(config-tc-2)# fwall-info 1 4/11 10.10.2.222 10.10.1.1
Zone1-SI-S(config-tc-2)# fwall-info 2 4/1 10.10.2.222 10.10.1.2
Zone1-SI-S(config-tc-2)# fwall-info 3 4/11 10.10.2.223 10.10.1.1
Zone1-SI-S(config-tc-2)# fwall-info 4 4/1 10.10.2.223 10.10.1.2
Zone1-SI-S(config-tc-2)# fwall-info 5 4/11 10.10.3.111 10.10.1.1
Zone1-SI-S(config-tc-2)# fwall-info 6 4/1 10.10.3.111 10.10.1.2
Zone1-SI-S(config-tc-2)# exit