Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual download pdf (Page 29)

18 ServerIron ADX Firewall Load Balancing Guide

53-1002436-01

Configuration guidelines

DRAFT: BROCADE CONFIDENTIAL

• You must configure a separate path on each ServerIron ADX for each firewall. The paths ensure

that firewall traffic with a given pair of source and destination IP addresses flows through the

same firewall each time. Thus, the paths reduce firewall overhead by eliminating unnecessary

revalidations.

NOTE

Path configuration is required for all load balancing configurations, whether the firewalls are

synchronous or asynchronous.

Configuring basic Layer 3 FWLB

To configure basic Layer 3 FWLB, perform the tasks in Table 4.

Defining the firewalls and adding them to the firewall group

When FWLB is enabled, all the IPv4 firewalls are in firewall group 2 and all the IPv6 firewalls are in

firewall group 4. However, you need to add an entry for each firewall, and then add the firewalls to

the appropriate firewall group. To add an entry for a firewall, specify the firewall name and the

corresponding IPv4 or IPv6 address. You can specify a name up to 32 characters long.

To define the firewalls and add them to a firewall group, use the following methods:

• “IPv4 example for defining a firewall and adding them to a firewall group” on page 18

• “IPv6 example for defining a firewall and adding them to a firewall group” on page 19

IPv4 example for defining a firewall and adding them to a firewall group

To define the IPv4 firewalls, shown in Figure 2 on page 11, and add them to a firewall group, enter

the following commands.

Commands for ServerIron ADX A (external)

ServerIron ADX(config)# server fw-name FW1-IPin 209.157.22.3

ServerIron ADX(config-rs-FW1-IPin)# exit

ServerIron ADX(config)# server fw-name FW2-IPin 209.157.22.4

ServerIron ADX(config-rs-FW2-IPin)# exit

ServerIron ADX(config)# server fw-group 2

ServerIron ADX(config-fw-2)# fw-name FW1-IPin

ServerIron ADX(config-fw-2)# fw-name FW2-IPin

TABLE 4 Basic Layer 3 configuration tasks

Task Reference

Configure global parameters

Configure firewall parameters

Define the firewalls and add them to the firewall group page 18

Configure firewall group parameters

Configure the paths and add static MAC entries for the firewall interfaces with the ServerIron

ADX

page 20

1 2 ... 24 25 26 27 28 29 30 31 32 33 34 ... 187 188

No comments

Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual Page 29