Radware Alteon Application Manual page 667

>> Filter 10# action allow
>> Filter 10# ena
14. Create the redirection filter. This filter redirects outbound traffic, load balancing it among the
defined real servers in the group. In this case, the real servers represent IP interfaces on the
dirty-side Alteon.
>> Filter 10# /cfg/slb/filt 15
>> Filter 15# sip any
>> Filter 15# dip any
>> Filter 15# proto any
>> Filter 15# action redir
>> Filter 15# group 1
>> Filter 15# ena
15. Add the filters to the ingress ports for the outbound packets.
Redirection filters are needed on all the ingress ports on the clean-side Alteon. Ingress ports are
any that attach to real servers or internal clients on the clean-side of the network. In this case,
two real servers are attached to the clean-side Alteon on ports 4 and 5.
>> Filter 15# /cfg/slb/port 4
>> SLB Port 4# add 10
>> SLB Port 4# add 15
>> SLB Port 4$ filt ena
>> SLB Port 4# /cfg/slb/port 5
>> SLB Port 5# add 10
>> SLB Port 5# add 15
>> SLB Port 5# filt ena
16. Define static routes to the dirty-side IP interfaces, using the firewalls as gateways.
One static route is required for each firewall path being load balanced. In this case, two paths
are required: one that leads to dirty-side IF 2 (10.1.1.1) through the first firewall (10.1.3.10) as
its gateway and one that leads to dirty-side IF 3 (10.1.2.1) through the second firewall
(10.1.4.10) as its gateway.
Note: Configuring static routes for FWLB does not require IP forwarding to be turned on.
>> SLB Port 5# /cfg/l3/route/ip4
>> IP Static Route# add 10.1.1.1 255.255.255.255 10.1.3.10
>> IP Static Route# add 10.1.2.1 255.255.255.255 10.1.4.10
Note: When adding an IPv4 static route, if you are using FWLB and you define two IP
interfaces on the same subnet, where one IP interface has a subnet of the host which is also
included in the subnet of the second interface, you must specify the interface.
Document ID: RDWR-ALOS-V2900_AG1302
Alteon Application Switch Operating System Application Guide
(Allow traffic)
(Enable the filter)
(Select Filter 15)
(From any source IP address)
(To any destination IP address)
(For any protocol)
(Perform redirection)
(To real server Group 1)
(Enable the filter)
(Select Ingress Port 4)
(Add the filter to the ingress port)
(Add the filter to the ingress port)
(Enable filtering on the port)
(Select Ingress Port 5)
(Add the filter to the ingress port)
(Add the filter to the ingress port)
(Enable filtering on the port)
Firewall Load Balancing
667