Table of Contents
Advertisement
S9700 Core Routing Switch
Configuration Guide - SPU
Figure 6-13 Networking for configuring standard firewall load balancing
Network
20.20.20.3/24
VIP:3.3.3.3:8
Configuration Roadmap
The configuration roadmap is as follows:
l
l
l
Issue 01 (2012-03-15)
XGE5/0/0
XGE0/0/1
XGE5/0/1
XGE0/0/2
GE1/0/26
GE1/0/25
IP
SwitchA
GE1/0/27
Host
0
SwitchA (level-1 load balancing device)
1.
Configure traffic importing.
2.
Configure two firewalls to communicate with two real firewalls.
3.
Configure a firewall group, including DMAC and bundle of the preceding two
firewalls.
4.
Configure a Layer 7 classifier.
5.
Configure a load balancing action profile and bind it to the firewall group.
6.
Configure an advanced ACL.
7.
Configure a Layer 3 classifier.
8.
Configure a load balancing policy.
9.
Apply the load balancing policy to a sub-interface.
SwitchB (firewall device)
1.
Import traffic to the firewall.
2.
Configure security zones and interzone.
3.
Add sub-interfaces to security zones.
SwitchC (level-2 load balancing device)
1.
Configure traffic importing.
2.
Configure a NAT address pool.
3.
Configure two servers to communicate with two real servers.
4.
Configure a server group and bind it to the two servers.
5.
Configure a Layer 7 classifier.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
GE4/0/6
GE4/0/2
FWA
FWB
GE4/0/7
GE4/0/3
SwitchB
6 Load Balancing Configuration
ServerA
GE1/0/22
IP
Network
GE1/0/28
SwitchC
GE1/0/23
ServerB
284
Advertisement
Table of Contents
