Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual download pdf (Page 151)

140 ServerIron ADX Firewall Load Balancing Guide

53-1002436-01

Configuration example for SLB-to-FWLB

DRAFT: BROCADE CONFIDENTIAL

The following commands configure the virtual server and bind it to the real servers with TCP port

80 (HTTP).

ServerIronADXA(config)# server virtual-name www.brocade.com 192.168.1.2

ServerIronADXA(config-vs-www.brocade.com)# port http

ServerIronADXA(config)# server virtual www.brocade.com

ServerIronADXA(config-vs-www.brocade.com)# bind http RS1 http

ServerIronADXA(config-vs-www.brocade.com)# bind http RS2 http

Enter the following command to enable SLB-to-FWLB.

NOTE

This command applies only to the ServerIron ADX that contains the SLB configuration. Do not enter

this command on the internal ServerIron ADX (ServerIronB).

ServerIronADXA(config)# server slb-fw

The following commands add two firewalls, FW1-IPin and FW2-IPin.

ServerIronADXA(config)# server fw-name FW1-IPin 192.168.1.30

ServerIronADXA(config-rs-FW1-IPin)# exit

ServerIronADXA(config)# server fw-name FW2-IPin 192.168.1.40

ServerIronADXA(config-rs-FW2-IPin)# exit

The following commands configure parameters for firewall group 2. The fwall-info commands

configure the paths for the firewall traffic. Each path consists of a path ID, the ServerIron port

attached to the firewall, the IP address of the ServerIron ADX at the other end of the path, and the

next-hop IP address (usually the firewall interface connected to this ServerIron). Make sure you

configure reciprocal paths on the other ServerIron ADX, as shown in the section containing the CLI

commands for ServerIron B.

NOTE

Path information is required even if the firewalls are synchronized.

The fw-name <firewall-name> command adds the firewalls to the firewall group.

ServerIronADXA(config)# server fw-group 2

ServerIronADXA(config-fw-2)# fw-name FW1-IPin

ServerIronADXA(config-fw-2)# fw-name FW2-IPin

ServerIronADXA(config-fw-2)# fwall-info 1 3 192.168.2.200 192.168.1.30

ServerIronADXA(config-fw-2)# fwall-info 2 5 192.168.2.200 192.168.1.40

ServerIronADXA(config-fw-2)# exit

The following commands add static MAC entries for the MAC addresses of the firewall interfaces

connected to the ServerIron. Notice that the QoS priority is configured as priority 1 and the

router-type parameter is specified. These parameters are required.

NOTE

To ensure proper operation, always configure the path IDs so that the IDs consistently range from

lowest path ID to highest path ID for the firewalls. For example, in Figure 20 on page 136, the path

IDs should range from lowest to highest beginning with the firewall interface at the upper left of the

figure.

To ensure smooth operation, you might want to depict your firewalls in a vertical hierarchy as in

Figure 20 on page 136, label the interfaces with their IP addresses, then configure the paths so that

the path IDs to the interfaces range from lowest to highest path ID starting from the uppermost

firewall interface.

1 2 ... 146 147 148 149 150 151 152 153 154 155 156 ... 187 188

Comments to this Manuals

No comments

Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual Page 151

Comments to this Manuals

Related products and manuals for Network switches Brocade Communications Systems ServerIron ADX 12.4.00