Huawei quidway s7700 Configuration Manual page 335

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
Figure 6-13 Networking for configuring standard firewall load balancing
Network
VIP:3.3.3.3:80
Configuration Roadmap
The configuration roadmap is as follows:
l
l
l
Issue 01 (2011-07-15)
XGE5/0/0 XGE0/0/1
XGE5/0/1 XGE0/0/2
GE1/0/26
GE1/0/25
IP
SwitchA
GE1/0/27
Host
20.20.20.3/24
SwitchA (level-1 load balancing device)
1. Configure traffic importing.
2. Configure two firewalls to communicate with two real firewalls.
3. Configure a firewall group, including DMAC and bundle of the preceding two
firewalls.
4. Configure a Layer 7 classifier.
5. Configure a load balancing action profile and bind it to the firewall group.
6. Configure an advanced ACL.
7. Configure a Layer 3 classifier.
8. Configure a load balancing policy.
9. Apply the load balancing policy to a sub-interface.
SwitchB (firewall device)
1. Import traffic to the firewall.
2. Configure security zones and interzone.
3. Add sub-interfaces to security zones.
SwitchC (level-2 load balancing device)
1. Configure traffic importing.
2. Configure a NAT address pool.
3. Configure two servers to communicate with two real servers.
4. Configure a server group and bind it to the two servers.
5. Configure a Layer 7 classifier.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
GE4/0/6 GE4/0/2
FWA
FWB
GE4/0/7
GE4/0/3
SwitchB
6 Load Balancing Configuration
Server
A
GE1/0/22
IP
Network
GE1/0/28
SwitchC
GE1/0/23
ServerB
324