Radware Alteon Application Manual page 664

Alteon Application Switch Operating System Application Guide
Firewall Load Balancing
11. Add filters to the ingress port.
>> SLB Port 5# /cfg/l3/route/ip4
>> IP Static Route# add 10.1.3.1 255.255.255.255 10.1.1.10
>> IP Static Route# add 10.1.4.1 255.255.255.255 10.1.2.10
Note: When adding an IPv4 static route, if you are using FWLB and you define two IP
interfaces on the same subnet, where one IP interface has a subnet of the host which is also
included in the subnet of the second interface, you must specify the interface.
12. Define static routes to the clean-side IP interfaces, using the firewalls as gateways.
One static route is required for each firewall path being load-balanced. In this case, two paths
are required: one that leads to clean-side IF 2 (10.1.3.1) through the first firewall (10.1.1.10)
as its gateway, and one that leads to clean-side IF 3 (10.1.4.1) through the second firewall
(10.1.2.10) as its gateway.
13. Apply and save the configuration changes
>> # apply
>> # save
To configure the clean-side Alteon
1. Define the clean-side IP interfaces. Create one clean-side IP interface on a different subnet for
each firewall being load balanced.
Note: An extra IP interface (IF 1) prevents server-to-server traffic from being redirected.
>> # /cfg/l3/if 1
>> IP Interface 1# addr 20.1.1.1
>> IP Interface 1# mask 255.255.255.0
>> IP Interface 1# ena
>> IP Interface 1# /cfg/l3/if 2
>> IP Interface 2# addr 10.1.3.1
>> IP Interface 2# mask 255.255.255.0
>> IP Interface 2# ena
>> IP Interface 2# /cfg/l3/if 3
>> IP Interface 3# addr 10.1.4.1
>> IP Interface 3# mask 255.255.255.0
>> IP Interface 3# ena
2. Configure the dirty-side IP interfaces as if they were real servers on the clean side.
664
(Select IP Interface 1)
(Set IP address for Interface 1)
(Set subnet mask for Interface 1)
(Enable IP Interface 1)
(Select IP Interface 2)
(Set the IP address for Interface 2)
(Set subnet mask for Interface 2)
(Enable IP Interface 2)
(Select IP Interface 3)
(Set the IP address for Interface 3)
(Set subnet mask for Interface 3)
(Enable IP Interface 3)
Document ID: RDWR-ALOS-V2900_AG1302