Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual Page 62
- Page / 188
- Table of contents
- BOOKMARKS
Rated. / 5. Based on customer reviews
ServerIron ADX Firewall Load Balancing Guide 51
53-1002436-01
Configuring HA active-active FWLB
3
DRAFT: BROCADE CONFIDENTIAL
Syntax: [no] server fw-strict-sec
The feature applies globally to all TCP traffic received for FWLB.
Complete CLI example
The following sections show the CLI commands for configuring the ServerIron ADXs in Figure 10.
Commands on ServerIron ADX SI-Ext-A
The following commands add a management IP address and default gateway address to the
ServerIron ADX. The IP address must be in the same sub-net as the ServerIron ADX’s interfaces
with the Layer 3 firewalls.
ServerIronADX> enable
ServerIronADX# configure terminal
ServerIronADX(config)# hostname SI-Ext-A
SI-Ext-A(config)# ip address 10.10.1.111 255.255.255.0
SI-Ext-A(config)# ip default-gateway 10.10.1.101
The following commands configure trunk groups for the synchronization link and the additional
data link between this ServerIron ADX and its high-availability partner.
SI-Ext-A(config)# trunk switch ethernet 4/5 to 4/6
SI-Ext-A(config)# trunk deploy
SI-Ext-A(config)# trunk switch ethernet 4/13 to 4/14
SI-Ext-A(config)# trunk deploy
The following commands enable the always-active feature and disable the Spanning Tree Protocol
(STP) in VLAN 1, which contains the ports that will carry the FWLB traffic.
SI-Ext-A(config)# vlan 1
SI-Ext-A(config-vlan-1)# always-active
SI-Ext-A(config-vlan-1)# no spanning-tree
SI-Ext-A(config-vlan-1)# exit
The following commands configure the ports for the synchronization link to the other ServerIron
ADX in a separate port-based VLAN. The separate VLAN is required. Add the ports as untagged
ports.
SI-Ext-A(config)# vlan 2 name sync_link by port
SI-Ext-A(config-vlan-2)# untagged ethernet 4/13 to 4/14
SI-Ext-A(config-vlan-2)# no spanning-tree
SI-Ext-A(config-vlan-2)# exit
The server fw-port command identifies the port that connects this ServerIron ADX to its
high-availability partner. The server partner-ports command identifies the data link that connects
this ServerIron ADX to its high-availability partner to reach the firewalls. If you use a trunk group,
specify the first port in the group (the group’s primary port).
SI-Ext-A(config)# server fw-port 4/13
SI-Ext-A(config)# server partner-ports ethernet 4/5
The server router-port command identifies the port that connects this ServerIron ADX to its default
gateway router.
SI-Ext-A(config)# server router-port 4/12
- ServerIron ADX 1
- Document History 2
- Contents 3
- About This Document 8
- Document conventions 9
- Notice to the reader 10
- Related publications 11
- ServerIron FWLB Overview 12
- Firewall environments 14
- Load balancing paths 15
- Firewall selection 17
- Hashing mechanism 17
- Stateful FWLB 18
- Health checks 18
- Path health checks 19
- Application health checks 19
- Firewall health check debug 21
- Basic FWLB topology 22
- HA FWLB topology 23
- Failover 24
- Router paths 24
- Multizone FWLB topology 25
- FWLB configuration limits 26
- Configuring Basic FWLB 28
- IPv4 Firewall-1 37
- IPv4 Firewall-2 37
- External 40
- Internal 40
- Firewall-2 42
- Firewall-1 42
- Configuring HA FWLB 48
- Session limits 49
- Session aging 49
- Task Reference 52
- Configuring the firewall port 53
- Configuring the partner port 54
- Configuring the router port 55
- Configuring the firewalls 55
- Adding the firewalls 55
- Connection rate control 57
- Complete CLI example 62
- HA FWLB with VRRP 73
- Usage notes 78
- Configuring Multizone FWLB 82
- Zone 3Zone 2 84
- Zone1-SI(config)# no span 85
- Failover algorithm 92
- Commands on Zone1-SI-A zone 1 92
- DRAFT: BROCADE CONFIDENTIAL 100
- 53-1002436-01 102
- SI-A SI-A 104
- In this chapter 124
- NAT firewalls 124
- Extra firewall method 129
- Access policy method 130
- Specifying the partner port 134
- Specifying the router ports 134
- Configuring FWLB and SLB 146
- Configuring SLB-to-FWLB 148
- Configuring the real servers 149
- Enabling SLB-to-FWLB 150
- Configuring FWLB-to-SLB 152
- Enabling FWLB-to-SLB 154
- FWLB configuration overview 166
- TCP/UDP port statistics 169
- FWLB path information 172
- Field Description 173
- • 6 – TCP 174
- • 17 – UDP 174
- In this appendix 176
- FWLB selection algorithms 182
- Configuration guidelines 186
- Denying FWLB 187
Related products and manuals for Network switches Brocade Communications Systems ServerIron ADX 12.4.00
(12 pages)
(64 pages)© 2020, manymanuals.com. All rights reserved. | 1.523 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals