Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual Page 157
- Page / 188
- Table of contents
- BOOKMARKS
Rated. / 5. Based on customer reviews
146 ServerIron ADX Firewall Load Balancing Guide
53-1002436-01
Configuration example for FWLB-to-SLB
6
DRAFT: BROCADE CONFIDENTIAL
Figure 22 shows an example of an active-active FWLB configuration that also supports SLB. The
pair of ServerIron ADXs on the non-secure (external) of the firewalls are connected to clients. The
pair of ServerIron ADXs on the secure side of the firewalls are connected to application servers.
Both pairs of ServerIron ADXs load balance the traffic to the firewalls and also perform SLB load
balancing for application traffic.
Both ServerIron ADXs in each pair actively load balance traffic as well as provide redundancy.
You can configure the network in Figure 22 for FWLB-to-SLB or SLB-to-FWLB. The configuration
commands after the figure show how to configure SLB-to-FWLB.
FIGURE 22 Active-active FWLB with SLB
The CLI commands in this section show how to configure SLB-to-FWLB. In SLB-to-FWLB, the
ServerIron ADX on the Internet side of the firewalls performs FWLB for traffic directed toward real
servers connected to the ServerIron ADX on the private side of the firewalls. The real servers are
configured as remote servers. In addition, the SLB-to-FWLB feature is enabled on the Internet
ServerIron ADX. The internal ServerIron ADX is configured for FWLB but requires no additional
configuration.
Commands on external ServerIron A (SI-Ext-A)
The following commands change the CLI to the global CONFIG level, then change the host name to
"SI-Ext-A".
ServerIronADX> enable
ServerIronADX# configure terminal
ServerIronADX(config)# hostname SI-Ext-A
SI-B
SI-A
Firewall-1
Firewall-2
Management
Station
SI-B
Synchronization
Link
Additional
Data Link
Synchronization
Link
Additional
Data Link
10.10.2.100
Port 3/1
Port 3/1
Port 4/1
Port 4/1
Port 4/1
Port 4/1
Port 3/2 Port 3/2
T
runk Ports 3/5 - 3/6
T
runk Ports 3/5 - 3/6
IP: 10.10.1.1
MAC: 00e0.5201.0426
IP: 10.10.1.2
MAC: 00e0.5201.2180
IP: 10.10.2.1
MAC: 00e0.5201.042e
IP: 10.10.2.2
MAC: 00e0.5201.2188
T
runk Ports 3/5 - 3/6
Trunk Ports 3/5 - 3/6
SI-A
ServerIron SI-Ext-B
10.10.1.112
ServerIron SI-Ext-A
10.10.1.111
ServerIron SI-Int-A
10.10.2.222
ServerIron SI-Int-B
10.10.2.223
ClientClient
10.10.2.40
10.10.2.4310.10.2.41
10.10.2.42
Application Servers
Application Servers
- ServerIron ADX 1
- Document History 2
- Contents 3
- About This Document 8
- Document conventions 9
- Notice to the reader 10
- Related publications 11
- ServerIron FWLB Overview 12
- Firewall environments 14
- Load balancing paths 15
- Firewall selection 17
- Hashing mechanism 17
- Stateful FWLB 18
- Health checks 18
- Path health checks 19
- Application health checks 19
- Firewall health check debug 21
- Basic FWLB topology 22
- HA FWLB topology 23
- Failover 24
- Router paths 24
- Multizone FWLB topology 25
- FWLB configuration limits 26
- Configuring Basic FWLB 28
- IPv4 Firewall-1 37
- IPv4 Firewall-2 37
- External 40
- Internal 40
- Firewall-2 42
- Firewall-1 42
- Configuring HA FWLB 48
- Session limits 49
- Session aging 49
- Task Reference 52
- Configuring the firewall port 53
- Configuring the partner port 54
- Configuring the router port 55
- Configuring the firewalls 55
- Adding the firewalls 55
- Connection rate control 57
- Complete CLI example 62
- HA FWLB with VRRP 73
- Usage notes 78
- Configuring Multizone FWLB 82
- Zone 3Zone 2 84
- Zone1-SI(config)# no span 85
- Failover algorithm 92
- Commands on Zone1-SI-A zone 1 92
- DRAFT: BROCADE CONFIDENTIAL 100
- 53-1002436-01 102
- SI-A SI-A 104
- In this chapter 124
- NAT firewalls 124
- Extra firewall method 129
- Access policy method 130
- Specifying the partner port 134
- Specifying the router ports 134
- Configuring FWLB and SLB 146
- Configuring SLB-to-FWLB 148
- Configuring the real servers 149
- Enabling SLB-to-FWLB 150
- Configuring FWLB-to-SLB 152
- Enabling FWLB-to-SLB 154
- FWLB configuration overview 166
- TCP/UDP port statistics 169
- FWLB path information 172
- Field Description 173
- • 6 – TCP 174
- • 17 – UDP 174
- In this appendix 176
- FWLB selection algorithms 182
- Configuration guidelines 186
- Denying FWLB 187
Related products and manuals for Network switches Brocade Communications Systems ServerIron ADX 12.4.00
(12 pages)
(64 pages)© 2020, manymanuals.com. All rights reserved. | 0.242 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals