Radware Alteon Application Manual page 662

Alteon Application Switch Operating System Application Guide
Firewall Load Balancing
>> IP Interface 3# addr 10.1.2.1
>> IP Interface 3# mask 255.255.255.0
>> IP Interface 3#ena
3. Configure the clean-side IP interface as if they are real servers on the dirty side.
Later in this procedure, you will configure one clean-side IP interface on a different subnet for
each firewall path being load balanced. On the dirty-side Alteon, create two real servers using
the IP address of each clean-side IP interface used for FWLB.
Note: The real server index number must be the same on both sides of the firewall. For
example, if Real Server 1 is the dirty-side IP interface for Firewall 1, then configure Real Server
1 on the clean side with the dirty-side IP interface. Configuring the same real server number on
both sides of the firewall ensures that the traffic travels through the same firewall.
>> IP Interface 3# /cfg/slb/real 1
>> Real server 1# rip 10.1.3.1
>> Real server 1# ena
>> Real server 1# /cfg/slb/real 2
>> Real server 2# rip 10.1.4.1
>> Real server 2# ena
Real servers in the server groups must be ordered the same on both clean side and dirty side
Alteon. For example, if the Real Server 1 IF connects to Firewall 1 for the clean side server
group, then the Real Server 1 IF on the dirty side should be connected to Firewall 1. Selecting
the same real server ensures that the traffic travels through the same firewall.
Note: Each of the four interfaces used for FWLB (two on each Alteon) in this example must be
configured for a different IP subnet.
4. Place the IP interface real servers into a real server group.
>> IP Interface 2# /cfg/slb/group 1
>> Real server group 1# add 1
>> Real server group 1# add 2
5. Set the health check type for the real server group to ICMP.
>> Real server group 1# health icmp
6. Set the load-balancing metric for the real server group to hash.
>> Real server group 1# metric hash
662
(Set the IF 3)
(Set subnet mask for IF 3)
(Enable IF3)
(Select Real Server 1)
(Assign clean-side IF 2 address)
(Enable Real Server 1)
(Select Real Server 2)
(Assign clean-side IF 3 address)
(Enable Real Server 2)
(Select Real Server Group 1)
(Add Real Server 1 to Group 1)
(Add Real Server 2 to Group 1)
(Select ICMP as health check type)
Document ID: RDWR-ALOS-V2900_AG1302