Radware Alteon Application Manual page 671

— Complete Primary Dirty-Side Alteon Configuration, page 678
— Complete Primary Clean-Side Alteon Configuration, page 680
Configure the Routers
The routers must be configured with a static route to the destination services being accessed by the
external clients.
In this example, the external clients are configured to connect to services at a publicly advertised IP
address on this network. Since the real servers are load balanced behind a virtual server on the
clean-side Alteon using normal SLB settings, the routers require a static route to the virtual server
IP address. The next hop for this static route is the Alteon Virtual Interface Router (VIR), which is in
the same subnet as the routers:
Route Added: 10.10.4.100 (to clean-side virtual server) via 195.1.1.9 (Subnet 1
VIR)
Configure the Firewalls
Before you configure Alteons, the firewalls must be properly configured. For incoming traffic, each
firewall must be configured with a static route to the clean-side virtual server, using the VIR in its
clean-side subnet as the next hop. For outbound traffic, each firewall must use the VIR in its dirty-
side subnet as the default gateway.
As shown in Table 60, in this example the firewalls are configured with the following IP addresses:
Table 60: Four-Subnet Firewall IP Address Configuration
Firewall
Firewall 1
Dirty-side IP interface
Clean-side IP interface
Default Gateway
Route added
Firewall 2
Dirty-side IP interface
Clean-side IP interface
Default gateway
Route added
The firewalls must also be configured with rules that determine which types of traffic will be
forwarded through the firewall and which will be dropped. All firewalls participating in FWLB must be
configured with the same set of rules.
Note: It is important to test the behavior of the firewalls prior to adding FWLB.
Document ID: RDWR-ALOS-V2900_AG1302
Alteon Application Switch Operating System Application Guide
IP Addresses
10.10.2.3
10.10.3.3
10.10.2.9 (Subnet 2 VIR)
10.10.4.100 (virtual server) via 10.10.3.9 (Subnet 3
VIR)
10.10.2.4
10.10.3.4
10.10.2.9 (dirty-side VIR)
10.10.4.100 (virtual server) via 10.10.3.9 (Subnet 3
VIR)
Firewall Load Balancing
671