Huawei quidway s7700 Configuration Manual page 278

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
performance of the firewall is low and the firewall becomes the bottleneck on the network. If
existing devices are replaced to improve the forwarding performance, hardware resources are
wasted. In addition, when the service volume increases, the devices need to be replaced
frequently. The costs on the device replacement are high.
You can create a firewall group to reduce the burden of each single firewall and improve the
network processing capability. In the scenario where firewall load balancing is configured, load
balancing devices are classified into level-1 and level-2 devices. Level-1 devices perform firwall
load balancing; level-2 devices ensure that any traffic received through a firewall is sent back
through the same firewall.
The firewall load balancing technology takes firewalls as servers.
Pre-configuration Tasks
Before configuring firewall load balancing, complete the following tasks:
l
l
l
Data Preparation
To configure firewall load balancing, you need the following data.
l
Issue 01 (2011-07-15)
Setting link layer parameters for the interfaces and ensuring that the status of the link layer
protocol on the interfaces is Up
Setting network layer parameters for the interfaces and ensuring that the routes between
devices are available
Performing the task of
Level-1 load balancing device
No. Data
1 (Optional) Name, type, and related parameters of the probe
2 Name and parameters of the firewall, including the description, server IP address,
weight, and bandwidth
3 Name and firewall group parameters, including the description, load balancing
algorithm, forwarding mode (fixed as DMAC), action performed when the
firewall group fails, threshold for switching the master firewall group to the
backup firewall group, bound probe, member, and member instance port number
4 (Optional) Name and sticky group parameters, including the description, aging
time, and static sticky entries
5 Parameters of the Layer 7 classifier, including the classifier name and matching
rule
6 Name and parameters of the load balancing action profile, including the
description and action
7 Parameters of the advanced ACL, including the ACL number, matching
sequence, and matching rule
8 Parameters of the Layer 3 classifier, including the classifier name and the ACL
and Layer 7 classifier bound to the Layer 3 classifier
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 SPU Pre-Configuration
6 Load Balancing Configuration
267