Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual Page 20
- Page / 188
- Table of contents
- BOOKMARKS
Rated. / 5. Based on customer reviews
ServerIron ADX Firewall Load Balancing Guide 9
53-1002436-01
Understanding ServerIron FWLB
1
DRAFT: BROCADE CONFIDENTIAL
The ServerIron performs the Layer 4 TCP and UDP health checks as follows:
• TCP health check – The ServerIron ADX checks the TCP port’s health based on a TCP three-way
handshake:
- The ServerIron ADX sends a TCP SYN packet to the port on the firewall.
- The ServerIron ADX expects the firewall to respond with a SYN ACK.
- If the ServerIron ADX receives the SYN ACK, the ServerIron sends a TCP RESET, satisfied
that the TCP port is alive.
• UDP health check – The ServerIron ADX sends a UDP packet with garbage (meaningless) data
to the UDP port:
- If the firewall responds with an ICMP “Port Unreachable” message, the ServerIron ADX
concludes that the port is not alive.
- If the server does not respond at all, the ServerIron ADX assumes that the port is alive and
received the garbage data.
For more information about and configuration of health checks, refer to the ServerIron ADX Server
Load Balancing Guide.
Firewall health check statistics
You can use the firewall health check statistics to analyze your firewall health checks.
Only statistics related to the firewall health check protocol (ICMP, TCP, and UDP) configured under a
firewall group display. If the firewall group is disabled or unconfigured, the health check statistics
related to that firewall group do not display.
Displaying firewall health check policy statistics
To display firewall health check policy statistics, enter the following command.
ServerIronADX 3018# show fw-health-check-stats
IPv4 Path Health Check Statistics:
==================================
ICMP : Requests Sent (10), Replies Received (10), Requests Received (10)
==================================
UDP Socket : Open Failed (0)
UDP Client : Requests Sent (16), Replies Received (16), Replies Rx-Dropped (0)
UDP Server : Requests Received (16), Replies Sent (16), Requests Rx-Dropped (0)
==================================
TCP Socket : Client Connect Failed (0), Server Listen Failed (0)
TCP Client : Requests Sent (18), Replies Received (18), Replies Rx-Dropped (0)
TCP Server : Requests Received (18), Replies Sent (18), Requests Rx-Dropped (0)
IPv6 Path Health Check Statistics:
==================================
ICMP6 : Requests Sent (10), Replies Received (10), Requests Received (10)
==================================
UDP6 Socket : Open Failed (0)
UDP6 Client : Requests Sent (16), Replies Received (16), Replies Rx-Dropped (0)
UDP6 Server : Requests Received (16), Replies Sent (16), Requests Rx-Dropped (0)
==================================
TCP6 Socket : Client Connect Failed (0), Server Listen Failed (0)
TCP6 Client : Requests Sent (18), Replies Received (18), Replies Rx-Dropped (0)
TCP6 Server : Requests Received (18), Replies Sent (18), Requests Rx-Dropped (0)
- ServerIron ADX 1
- Document History 2
- Contents 3
- About This Document 8
- Document conventions 9
- Notice to the reader 10
- Related publications 11
- ServerIron FWLB Overview 12
- Firewall environments 14
- Load balancing paths 15
- Firewall selection 17
- Hashing mechanism 17
- Stateful FWLB 18
- Health checks 18
- Path health checks 19
- Application health checks 19
- Firewall health check debug 21
- Basic FWLB topology 22
- HA FWLB topology 23
- Failover 24
- Router paths 24
- Multizone FWLB topology 25
- FWLB configuration limits 26
- Configuring Basic FWLB 28
- IPv4 Firewall-1 37
- IPv4 Firewall-2 37
- External 40
- Internal 40
- Firewall-2 42
- Firewall-1 42
- Configuring HA FWLB 48
- Session limits 49
- Session aging 49
- Task Reference 52
- Configuring the firewall port 53
- Configuring the partner port 54
- Configuring the router port 55
- Configuring the firewalls 55
- Adding the firewalls 55
- Connection rate control 57
- Complete CLI example 62
- HA FWLB with VRRP 73
- Usage notes 78
- Configuring Multizone FWLB 82
- Zone 3Zone 2 84
- Zone1-SI(config)# no span 85
- Failover algorithm 92
- Commands on Zone1-SI-A zone 1 92
- DRAFT: BROCADE CONFIDENTIAL 100
- 53-1002436-01 102
- SI-A SI-A 104
- In this chapter 124
- NAT firewalls 124
- Extra firewall method 129
- Access policy method 130
- Specifying the partner port 134
- Specifying the router ports 134
- Configuring FWLB and SLB 146
- Configuring SLB-to-FWLB 148
- Configuring the real servers 149
- Enabling SLB-to-FWLB 150
- Configuring FWLB-to-SLB 152
- Enabling FWLB-to-SLB 154
- FWLB configuration overview 166
- TCP/UDP port statistics 169
- FWLB path information 172
- Field Description 173
- • 6 – TCP 174
- • 17 – UDP 174
- In this appendix 176
- FWLB selection algorithms 182
- Configuration guidelines 186
- Denying FWLB 187
Related products and manuals for Network switches Brocade Communications Systems ServerIron ADX 12.4.00
(12 pages)
(64 pages)© 2020, manymanuals.com. All rights reserved. | 0.481 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals