Configuring Basic Fwlb; Figure 13-4 Basic Fwlb Example Network - Nortel Web OS Switch Software Application Manual

Configuring Basic FWLB

The steps for configuring basic FWLB are provided below. While two or four switches can be
used, the following procedure assumes a simple network topology with only two Web switches
(one on each side of the firewalls) as shown in
Internet

Figure 13-4 Basic FWLB Example Network

Configure the Dirty-Side Web Switch
1. Configure VLANs.
N
OTE
configure VLANs, you must enable Spanning Tree Protocol to prevent broadcast loops.
2. Define the dirty-side IP interface.
In addition to one IP interface for general switch management, there must be one dirty-side IP
interface for each firewall path being load balanced. Each must be on a different subnet.
>> # /cfg/ip/if 1
>> IP Interface 1# addr 192.16.12.1
>> IP Interface 1# mask 255.255.255.0
>> IP Interface 1# ena
>> IP Interface 1# ../if 2
>> IP Interface 2# addr 10.1.1.1
>> IP Interface 2# mask 255.255.255.0
>> IP Interface 2# ena
>> IP Interface 2# ../if 3
>> IP Interface 3# addr 10.1.2.1
>> IP Interface 3# mask 255.255.255.0
>> IP Interface 3# ena
212777-A, February 2002
"Dirty" Side
Web Switch 1
IF1: 192.16.12.1
2
1
3
IF2: 10.1.1.1
IF3: 10.1.2.1
– Alternately, if using hubs between the switches and firewalls and you do not wish to
Figure 13-4.
"Clean" Side
Firewall 1
Clean Side:
Dirty Side:
10.1.3.10
10.1.1.10
Firewall 2
Dirty Side:
Clean Side:
10.1.2.10
10.1.4.10
Chapter 13: Firewall Load Balancing
Web OS 10.0 Application Guide
Web Switch 2
IF1: 20.1.1.1
Virtual Server:
20.1.1.10
2 4
3 5
IF2: 10.1.3.1
IF3: 10.1.4.1
(Select IP interface 1)
(Set address for switch management)
(Set subnet mask for interface 1)
(Enable IP interface 1)
(Select IP interface 2)
(Set the IP address for interface 2)
(Set subnet mask for interface 2)
(Enable IP interface 2)
(Select IP interface 3)
(Set the IP address for interface 3)
(Set subnet mask for interface 3)
(Enable IP interface 3)
Servers
20.1.1.2
20.1.1.3
n
319