Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual Page 139

  • Download
  • Add to my manuals
  • Print
  • Page
    / 149
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 138
ServerIron ADX NAT64 Configuration Guide 127
53-1002444-02
IP NAT redundancy
7
DRAFT: BROCADE CONFIDENTIAL
ServerIronADX(config)# vlan 100
ServerIronADX(config-vlan-100)# untagged ethernet 1/1
ServerIronADX(config-vlan-100)# router-interface ve 1
ServerIronADX(config-vlan-100)# exit
ServerIronADX(config)# vlan 200
ServerIronADX(config-vlan-200)# untagged ethernet 1/2
ServerIronADX(config-vlan-200)# router-interface ve 2
ServerIronADX(config-vlan-200)# exit
ServerIronADX-A(config)# interface ve 1
ServerIronADX-A(config-ve-1)# 10.10.20.2 255.255.255.0
ServerIronADX-A(config-ve-1)# ip nat outside
ServerIronADX-A(config-ve-1)# exit
ServerIronADX-A(config)# interface ve 2
ServerIronADX-A(config-ve-2)# 10.10.10.2 255.255.255.0
ServerIronADX-A(config-ve-2)# ip nat inside
ServerIronADX-A(config-ve-2)# exit
ServerIronADX-B(config)# interface ve 1
ServerIronADX-B(config-ve-1)# 10.10.20.4 255.255.255.0
ServerIronADX-A(config-ve-1)# ip nat outside
ServerIronADX-B(config-ve-1)# exit
ServerIronADX-B(config)# interface ve 2
ServerIronADX-B(config-ve-2)# 10.10.10.4 255.255.255.0
ServerIronADX-A(config-ve-2)# ip nat inside
ServerIronADX-B(config-ve-2)# exit
4. Configure a standard or extended ACL identifying each private address range for which you
wish to provide NAT:
ServerIronADX(config)# access-list 10 permit 10.10.1.0 0.0.0.255
5. Configure a dynamic NAT pool on each ServerIron ADX, and assign device ownership to the NAT
pool. In this example, ServerIron ADX A is assigned as the NAT pool owner, and therefore takes
the higher priority value:
ServerIronADX-A(config)# ip nat pool P1 10.10.20.21 10.10.20.40 prefix-len 24
ServerIronADX-A(config)# ip nat pool P1 port-pool-range 2
ServerIronADX-B(config)# ip nat pool P1 10.10.20.21 10.10.20.40 prefix-len 24
ServerIronADX-B(config)# ip nat pool P1 port-pool-range 1
6. Tie the inside source ACL to the dynamic NAT pool and enable PAT (overload)
ServerIronADX(config)# ip nat inside source list 10 pool P1 overload
7. Configure the VRRP-E parameters. The IP address configured with the ip-address command is
the address that will be backed up by VRRP-E. The track-port commands enable tracking on
the interfaces on the other side of the ServerIron ADX that complete the link for the VRID. For
example, traffic that is addressed to VRID 1 enters the ServerIron ADX through VE interface 1
and leaves the ServerIron ADX through VE interface 2. Under normal circumstances, if VE
interface 2 goes down, VRID 1 remains active.
When you track interfaces for a VRID, if the state of one of the tracked interfaces changes, the
ServerIron ADX associates the change with the VRID interface. For example, if virtual routing
interface 2 goes down, the ServerIron ADX associates this state change with VRID 1 and
causes VRRP-E to fail over the VRID to the other ServerIron ADX. The ServerIron ADX on which
you configure the higher VRRP-E backup priority becomes the default master for the VRID,
while other ServerIron ADX becomes the backup.
In this example, ServerIron ADX A is configured as the default master for the HA setup.
Page view 138
1 2 ... 134 135 136 137 138 139 140 141 142 143 144 ... 148 149

Comments to this Manuals

No comments