Cisco catalyst 6500 series Configuration Note page 142

Configuring Stealth Firewall Load Balancing
Command
Step 1
Switch-B(config)# module csm 6
Step 2
Switch-B(config-module-csm)# serverfarm
FORWARD-SF
Step 3
Switch-B(config-slb-sfarm)# no nat server
Step 4
Switch-B(config-slb-sfarm)# predictor
forward
Step 5
Switch-B(config-slb-sfarm)# exit
Step 6
Switch-B(config-module-csm)# serverfarm
TO-OUTSIDE-SF
Step 7
Switch-B(config-slb-sfarm)# no nat server
Step 8
Switch-B(config-slb-sfarm)# real
10.0.101.100
Step 9
Switch-B(config-slb-real)# inservice
Step 10
Switch-B(config-slb-real)# exit
Step 11
Switch-B(config-slb-sfarm)# real
10.0.102.100
Step 12
Switch-B(config-slb-real)# inservice
Step 13
Switch-B(config-slb-real)# exit
Step 14
Switch-B(config-module-csm)# serverfarm
SERVERS-SF
Step 15
Switch-B(config-slb-sfarm)# real
10.1.0.101
Step 16
Switch-B(config-slb-real)# inservice
Step 17
Switch-B(config-slb-real)# exit
Step 18
Switch-B(config-slb-sfarm)# real
10.1.0.102
Step 19
Switch-B(config-slb-real)# inservice
Step 20
Switch-B(config-slb-sfarm)# real
10.1.0.103
Step 21
Switch-B(config-slb-real)# inservice
1. FORWARD-SF is actually a route forwarding policy, not an actual server farm, that allows traffic to reach the intranet
(through VLAN 20). It does not contain any real servers.
Catalyst 6500 Series Content Switching Module Configuration Note
11-14
Chapter 11 Configuring Firewall Load Balancing
Purpose
Enters multiple module configuration mode and
specifies that CSM B is installed in slot 6.
Creates and names the FORWARD-SF
(actually a forwarding policy) and enters server farm
configuration mode.
Disables the NAT of server IP addresses and port
2
numbers .
Forwards traffic in accordance with its internal
routing tables rather than a load-balancing
algorithm.
Returns to multiple module configuration mode.
Creates and names the GENERIC-SF server farm
and enters server farm configuration mode
Disables NAT of server IP addresses and port
4
numbers .
Identifies the alias IP address of CSM A that is
locked on the path to Firewall 1 as a real server and
enters real server configuration submode.
Enables the real server (actually an alias IP address).
Returns to server farm configuration mode.
Identifies the alias IP address of CSM B that is
located on the path to Firewall 2 as a real server and
enters real server configuration submode.
Enables the real server (actually an alias IP address).
Returns to server farm configuration mode.
Creates and names the SERVERS-SF
and enters serverfarm configuration mode.
Identifies a server in the intranet as a real server,
assigns it an IP address, and enters real server
configuration submode.
Enables the real server.
Returns to server farm configuration mode.
Identifies a server in the intranet as a real server,
assigns it an IP address, and enters real server
configuration submode.
Enables the real server.
Identifies a server in the intranet as a real server,
assigns it an IP address, and enters real server
configuration submode.
Enables the real server.
1
server farm
3
.
5
server farm
OL-4612-01