Cisco catalyst 6500 series Configuration Note page 150

Configuring Regular Firewall Load Balancing
Command
Step 6
Switch-B(config-module-csm)# vlan 20
server
Step 7
Switch-B(config-slb-vlan-server)# ip
address 10.1.0.26 255.255.255.0
Step 8
Switch-B(config-slb-vlan-server)# exit
Step 9
Switch-B(config-module-csm)# vlan 200
client
Step 10
Switch-B(config-slb-vlan)# ip address
200.0.0.26 255.255.255.0
1. This step provides a target for CSM A to use in making a load-balancing decision.
Configuring Server Farms on CSM B
Note
To configure two server farms on CSM B, perform this task:
Command
Step 1
Switch-B(config)# module csm 6
Step 2
Switch-B(config-module-csm)# serverfarm
GENERIC-SF
Step 3
Switch-B(config-slb-sfarm)# real
10.1.0.101
Step 4
Switch-B(config-slb-real)# inservice
Step 5
Switch-B(config-slb-real)# exit
Step 6
Switch-B(config-slb-sfarm)# real
10.1.0.102
Step 7
Switch-B(config-slb-real)# inservice
Step 8
Switch-B(config-slb-real)# exit
Step 9
Switch-B(config-slb-sfarm)# exit
Step 10
Switch-B(config-module-csm)# serverfarm
SEC-SF
Step 11
Switch-B(config-slb-sfarm)# no nat server
Step 12
Switch-B(config-slb-sfarm)# predictor
hash address destination 255.255.255.255
Catalyst 6500 Series Content Switching Module Configuration Note
11-22
Firewall 1 and Firewall 2 secure-side IP addresses are configured as real servers in the
INSEC-SF server farm associated with CSM A.
Chapter 11 Configuring Firewall Load Balancing
Purpose
Specifies VLAN 20 as the VLAN that is being
configured, identifies it as a server VLAN, and
enters VLAN configuration mode.
Specifies an IP address and netmask for VLAN 20.
Returns to VLAN configuration mode.
Specifies VLAN 200 as the VLAN that is being
configured, identifies it as a client VLAN, and enters
VLAN configuration mode.
Specifies an IP address and netmask for VLAN 200.
Purpose
Enters multiple module configuration mode and
specifies that CSM B is installed in slot 6.
Creates and names the GENERIC-SF
and enters server farm configuration mode.
Identifies a server in the internal server farm as a real
server, assigns it an IP address, and enters real server
configuration submode.
Enables the real server.
Returns to server farm configuration mode.
Identifies a server in the internal server farm as a real
server, assigns it an IP address, and enters real server
configuration submode.
Enables the real server.
Returns to server farm configuration mode.
Returns to multiple module configuration mode.
Creates and names the SEC-SF
enters server farm configuration mode.
Disables the NAT of server IP address and port
3
number .
Selects a server using a hash value based on the
4
destination IP address .
1
server farm
2
server farm and
OL-4612-01