Radware Alteon Application Manual page 320

Alteon Application Switch Operating System Application Guide
Load Balancing Special Services
2. On the master Alteon, configure the interswitch link ports/VLANs for the IDS VLAN.
/cfg/port 25/tag ena/pvid 1000
/cfg/port 26/tag ena/pvid 1000
3. Configure trunk groups.
/cfg/l2/trunk 1/ena/add 25/add 26
/cfg/l2/trunk 2/ena/add 27/add 28
4. Configure an IP interface for the SNMP health check to the other Alteon.
/cfg/l3/if 3/addr 11.11.11.1/mask 255.255.255.255/vlan 1000
5. Configure VLANs. Disable source MAC address learning only on the IDS VLANs.
The following VLANS are configured on Alteon:
— VLAN 1—For load balancing traffic to the real servers
— VLAN 1000—For performing SNMP health checks on Alteon 2
— VLAN 1001—For IDS Server 1
— VLAN 1002—For IDS Server 2
— VLAN 1003—For IDS Server 3
— VLAN 1004—For IDS Server 4
>> Main# /cfg/l2/vlan 1001/ena
>> VLAN 1001# learn dis
:
>> VLAN 1001# add 25/add 26
Port 25 is an UNTAGGED port and its current PVID is 1.
Confirm changing PVID from 1 to 1001 [y/n]: y
Port 26 is an UNTAGGED port and its current PVID is 1.
Confirm changing PVID from 1 to 1001 [y/n]: y
>> Layer 2# /cfg/l2/vlan 1001/ena/learn dis/add 25/add 26
>> Layer 2# /cfg/l2/vlan 1002/ena/learn dis/add 25/add 26
>> Layer 2# /cfg/l2/vlan 1003/ena/learn dis/add 25/add 26
>> Layer 2# /cfg/l2/vlan 1004/ena/learn dis/add 25/add 26
6. Configure the IDS servers as real servers.
In Figure 49 - Server Load Balancing and IDS Load Balancing Across Multiple Alteons, page
319, the IDS servers are set up with non-routable IP addresses. The real servers must be
numbered between 1 and 63. SNMP health checks are configured to check the status of the
ports on Alteon 2 that are connected to the IDS servers.
>> # /cfg/slb/real 1/rip 11.11.11.1/ena
>> Real server 1 # ids/idsvlan 1001
>> Real Server 1 IDS# idsport 25
>> Real Server 1 IDS# oid 1.3.6.1.2.1.2.2.1.8.257
>> # /cfg/slb/real 2/rip 11.11.11.1/ena
>> Real server 2 # ids/idsvlan 1002
320
(Add ports 25, 26 to Trunk Group 1)
(Add ports 27, 28 to Trunk Group 2)
(Disable source MAC learning on the IDS
VLAN)
(Set port members of the VLAN)
(Set IP address for IDS Server 1)
(Set IDS VLAN for IDS Server 1)
(Set IDS VLAN port)
(Set OID to health check port 1)
Document ID: RDWR-ALOS-V2900_AG1302