Radware Alteon Application Manual page 673

— To primary clean-side IF 3 via Firewall 2 using dirty-side IF 3
— To secondary clean-side IF 2 via Firewall 1 using dirty-side IF 2
— To secondary clean-side IF 3 via Firewall 2 using dirty-side IF 3
Note: IF 2 is used on all Alteons whenever routing through the top firewall, and IF 3 is used on
all Alteons whenever routing through the lower firewall.
The static route
add
add <destination address> <dest. mask> <gateway address> <source interface>
This example requires the following static route configuration:
>> /cfg/l3/route/ip4|ip6
>> # add 10.10.3.1 255.255.255.255 10.10.2.3 2
>> # add 10.10.3.2 255.255.255.255 10.10.2.4 3
>> # add 10.10.3.11 255.255.255.255 10.10.2.3 2
>> # add 10.10.3.12 255.255.255.255 10.10.2.4 3
Note: When defining static routes for FWLB, it is important to specify the source IP interface
numbers.
5. When dynamic routing protocols are not used, configure a gateway to the external routers.
>> /cfg/l3/gw 1/addr 195.1.1.1
>> /cfg/l3/gw 2/addr 195.1.1.2
6. Apply and save the configuration, and reboot Alteon.
>> # apply
>> # save
>> # /boot/reset
Configure the Secondary Dirty-Side Alteon
The following is an example configuration for a secondary dirty-side Alteon.
To configure the secondary dirty-side Alteon
Except for the IP interfaces, this configuration is identical to the configuration of the primary dirty-
side Alteon.
1. Configure VLANs on the secondary dirty-side Alteon.
>> /cfg/l2/vlan 2
>> add 26
>> add 28
>> ena
Document ID: RDWR-ALOS-V2900_AG1302
Alteon Application Switch Operating System Application Guide
command uses the following format:
Firewall Load Balancing
673