Radware Alteon Application Manual page 310

Alteon Application Switch Operating System Application Guide
Load Balancing Special Services
The following summarizes the primary steps involved in configuring IDS load balancing:
1. Set up the IDS servers.
Determine if you want to setup the IDS servers in stealth mode (without IP addresses) or with
non-routable IP addresses. For more information about setting up IDS servers, see
IDS Servers, page 311.
2. Create the IDS groups.
Create real server groups for the IDS servers. You may create multiple IDS groups to segregate
incoming traffic based on protocols.
— Choose the metric for the group as hash
— Choose the health check for the group: link, icmp, arp, or snmp
— Enable IDS on the group
— Select the type of traffic that is captured by the group by defining the IDS rport value.
Default: any
If multiple groups are configured for the same rport, then only one of the groups is used for
SLB.
3. Enable IDS on the incoming ports (both client and server ports).
Enabling IDS at the port level enables Alteon to make a copy of the frames ingressing the port
and forward the copy to the IDS server group.
4. Configure filter processing on the incoming ports with the IDS hash metric.
This allows a session entry to be created for frames ingressing the port. IDS load balancing
requires a session entry to be created in order to store the information regarding which IDS
server to send the request.
If the allow filter is configured to hash on both the client and server IP address, then this
ensures that both client and server traffic belonging to the same session is sent to the same IDS
server. For more information, see
If the port is configured for client processing only, then Alteon hashes on the source IP address
only.
310
Example 2: Load Balancing to Multiple IDS Groups, page
Document ID: RDWR-ALOS-V2900_AG1302
Setting Up
315.