Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual Page 104
- Page / 188
- Table of contents
- BOOKMARKS
Rated. / 5. Based on customer reviews
ServerIron ADX Firewall Load Balancing Guide 93
53-1002436-01
Configuration examples with Layer 3 routing
4
DRAFT: BROCADE CONFIDENTIAL
FIGURE 16 Multizone FWLB with one sub-net and one virtual routing interface
This configuration example also uses SLB. The application servers connected to the ServerIron
ADXs in zones 2 and 3 are configured on the ServerIron ADXs as real servers and bound to a
virtual
IP. The ServerIron ADXs in zone 1 load balance client requests for the servers in zones 2 and
3, in addition to load balancing the traffic to the firewalls. FWLB-to-SLB and SLB-to-FWLB are used
in this configuration. FWLB-to-SLB enables the ServerIron ADXs in zones 2 and 3 to learn the
firewall from which a client request is received and send the server reply back through the same
firewall. SLB-to-FWLB on the ServerIron ADXs in zone 1 performs FWLB for traffic directed toward
the real servers connected to the ServerIron ADXs in zones 2 and 3.
Commands on zone 1’s active ServerIron ADX (Zone1-SI-A)
The following commands change the CLI to the global CONFIG level, and then change the host
name to "Zone1-SI-A".
ServerIronADX> enable
ServerIronADX# configure terminal
ServerIronADX(config)# hostname Zone1-SI-A
The following commands enable the always-active feature and disable the Spanning Tree Protocol
(STP) in VLAN
1, which contains the ports that will carry the FWLB traffic.
Zone1-SI-A(config)# vlan 1
Zone1-SI-A(config-vlan-1)# always-active
Zone1-SI-A(config-vlan-1)# no spanning-tree
When undefined, Zone 1 contains
all addresses not in the other zones.
External Router
Active
ServerIron A
Standby
ServerIron A
10.10.1.101
Ports
4/9 - 4/10
Ports
4/9 - 4/10
Ports
4/11 - 4/12
Port 4/1
Port 4/1
Ports
4/11 - 4/12
Port 4/1
FW1
FW2
SI-A
SI-A
SI-A
Zone 1
Zone 2
= 10.10.2.x/24
Zone 3
= 10.10.3.x/24
IP: 20.20.100.100
Gateway: 20.20.254.254
IP: 10.10.2.40
Gateway: 10.10.2.222
IP: 10.10.2.42
Gateway: 10.10.2.222
IP: 10.10.2.41
Gateway: 10.10.2.222
IP: 10.10.2.43
Gateway: 10.10.2.222
Sync Link
Data Link
IP: 10.10.1.2
MAC: 00e0.5207.973c
IP: 10.10.1.1
MAC: 00e0.5201.a17a
IP: 10.10.3.2
MAC: 00e0.5207.9744
IP: 10.10.3.1
MAC: 00e0.5201.a17a
IP: 10.10.2.2
MAC: 00e0.5207.9742
IP: 10.10.2.1
MAC: 00e0.5201.a180
Active
ServerIron A
Standby
ServerIron A
Ports
4/9 - 4/10
Ports
4/9 - 4/10
Ports
4/11 - 4/12
Ports
4/11 - 4/12
SI-A SI-A
Sync Link
Data Link
Port 4/1 Port 4/2
Active
ServerIron A
- ServerIron ADX 1
- Document History 2
- Contents 3
- About This Document 8
- Document conventions 9
- Notice to the reader 10
- Related publications 11
- ServerIron FWLB Overview 12
- Firewall environments 14
- Load balancing paths 15
- Firewall selection 17
- Hashing mechanism 17
- Stateful FWLB 18
- Health checks 18
- Path health checks 19
- Application health checks 19
- Firewall health check debug 21
- Basic FWLB topology 22
- HA FWLB topology 23
- Failover 24
- Router paths 24
- Multizone FWLB topology 25
- FWLB configuration limits 26
- Configuring Basic FWLB 28
- IPv4 Firewall-1 37
- IPv4 Firewall-2 37
- External 40
- Internal 40
- Firewall-2 42
- Firewall-1 42
- Configuring HA FWLB 48
- Session limits 49
- Session aging 49
- Task Reference 52
- Configuring the firewall port 53
- Configuring the partner port 54
- Configuring the router port 55
- Configuring the firewalls 55
- Adding the firewalls 55
- Connection rate control 57
- Complete CLI example 62
- HA FWLB with VRRP 73
- Usage notes 78
- Configuring Multizone FWLB 82
- Zone 3Zone 2 84
- Zone1-SI(config)# no span 85
- Failover algorithm 92
- Commands on Zone1-SI-A zone 1 92
- DRAFT: BROCADE CONFIDENTIAL 100
- 53-1002436-01 102
- SI-A SI-A 104
- In this chapter 124
- NAT firewalls 124
- Extra firewall method 129
- Access policy method 130
- Specifying the partner port 134
- Specifying the router ports 134
- Configuring FWLB and SLB 146
- Configuring SLB-to-FWLB 148
- Configuring the real servers 149
- Enabling SLB-to-FWLB 150
- Configuring FWLB-to-SLB 152
- Enabling FWLB-to-SLB 154
- FWLB configuration overview 166
- TCP/UDP port statistics 169
- FWLB path information 172
- Field Description 173
- • 6 – TCP 174
- • 17 – UDP 174
- In this appendix 176
- FWLB selection algorithms 182
- Configuration guidelines 186
- Denying FWLB 187
Related products and manuals for Network switches Brocade Communications Systems ServerIron ADX 12.4.00
(12 pages)
(64 pages)© 2020, manymanuals.com. All rights reserved. | 1.735 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals