Configuring Firewall Load Balancing - Huawei S9700 Series Configuration Manual

S9700 Core Routing Switch
Configuration Guide - SPU
Procedure
l
l
l
l
l
l
l
l
l
l
----End

6.5 Configuring Firewall Load Balancing

On a network where multiple firewalls exist, you can load balance network traffic among
firewalls in a group. In this manner, the burden of each single firewall is reduced and the network
processing capability is improved.
Applicable Environment
Firewalls are the network guards that protect networks. They carefully checks packets on
networks; however, they are prone to be network bottleneck because of their limited
performance. If the existing devices are replaced to improve the forwarding performance,
resources are wasted. In addition, as the service volume increases, the devices needs to be
replaced frequently; the enterprise will incur high replacement costs.
Creating a firewall group reduces the burden of each single firewall and improves the network
processing capability. Load balancing devices are classified into level-1 and level-2 devices.
Level-1 devices perform firewall load balancing; level-2 devices ensure that any traffic received
through a firewall is sent back through the same firewall.
Firewall load balancing takes firewalls as servers.
Pre-configuration Tasks
Before configuring firewall load balancing, complete the following tasks:
Issue 01 (2012-03-15)
Run the display load-balance member [ name member-name | all ] command to check
the configuration of the load balancing member.
Run the display load-balance probe [ name probe-name [ group name group-name
member name member-name ] | all ] command to check the configuration of the probe.
Run the display load-balance group [ name group-name | all ] command to check the
configuration of the load balancing group.
Run the display load-balance group name group-name member name member-name
[ verbose ] command to check the configuration of the load balancing member instance.
Run the display load-balance l7classifier [ name l7classifier-name | all ] command to
check the configuration of the Layer 7 classifier.
Run the display load-balance action [ name action-name | all ] command to check the
configuration of the load balancing action profile.
Run the display load-balance l3classifier [ name l3classifier-name | all ] command to
check the configuration of the Layer 3 classifier.
Run the display load-balance policy [ name policy-name | all ] command to check the
configuration of the load balancing policy.
Run the display load-balance parameter connection [ name connection-name | all ]
command to check the configuration of the connection parameter profile.
Run the display load-balance parameter http [ name http-name | all ] command to check
the configuration of the HTTP parameter profile.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Load Balancing Configuration
226