Table of Contents
Advertisement
15.
Add the filters to the ingress ports for the outbound packets.
Redirection filters are needed on all the ingress ports on the clean-side Web switch. Ingress
ports are any that attach to real servers or internal clients on the clean-side of the network. In
this case, two real servers are attached to the clean-side Web switch on port 4 and port 5.
>> Filter 15# ../port 4
>> SLB Port 4# add 10
>> SLB Port 4# add 15
>> SLB Port 4# filt ena
>> SLB Port 4# ../port 5
>> SLB Port 5# add 10
>> SLB Port 5# add 15
>> SLB Port 5# filt ena
16.
Define static routes to the dirty-side IP interfaces, using the firewalls as gateways.
One static route is required for each firewall path being load balanced. In this case, two paths
are required: one that leads to dirty-side IF 2 (10.1.1.1) through the first firewall (10.1.3.10) as
its gateway, and one that leads to dirty-side IF 3 (10.1.2.1) through the second firewall
(10.1.4.10) as its gateway.
>> SLB Port 5# /cfg/ip/route
>> IP Static Route# add 10.1.1.1 255.255.255.255 10.1.3.10
>> IP Static Route# add 10.1.2.1 255.255.255.255 10.1.4.10
N
OTE
17.
Apply and save the configuration changes.
>> # apply
>> # save
212777-A, February 2002
–
Configuring static routes for FWLB does not require IP forwarding to be turned on.
Web OS 10.0 Application Guide
(Select ingress port 4)
(Add the filter to the ingress port)
(Add the filter to the ingress port)
(Enable filtering on the port)
(Select ingress port 5)
(Add the filter to the ingress port)
(Add the filter to the ingress port)
(Enable filtering on the port)
Chapter 13: Firewall Load Balancing
n
325
Advertisement
Table of Contents
