Avaya P333R-LB User Manual page 238

Chapter 7 Firewall Load Balancing
To configure your network as in Figure 7.7, the following should be done:
• The LAN routers (or hosts) should be configured with 10.4.1.3 as the next hop
toward the WAN (the default gateway in many cases).
• The access router should be configured with 193.170.1.3 as the next hop toward
the LAN.
• The firewalls must be configured to allow ICMP Echo to pass between the two
load balancers (10.1.1.1 and 10.1.1.2) for health-check purposes.
In addition, Bridging firewalls are transparent in terms of Layer 3. Therefore, to
configure paths through the firewalls:
• P333R-LB1 must be configured to view the IP interfaces of P333R-LB2 (10.1.1.2,
10.2.1.2) as its "Real Servers".
• P333R-LB2 must be configured to view the IP interfaces of P333R-LB1 (10.1.1.1,
10.2.1.1) as its "Real Servers".
• Firewall 1 and Firewall 2 must be connected to different ports, and those ports
must be set to different VLANs.
The following configuration file is a result of configuring your network as shown in
Figure 7.7:
----------------
P333R-LB 1
----------------
set vlan
set vlan
set vlan
!
hostname "P333R-LB 1"
!
interface "1"
ip vlan name "v1"
ip address 10.1.1.1
!
interface "2"
ip vlan name "v2"
ip address 10.2.1.1
!
interface "3"
ip vlan name "v3"
ip address 10.4.1.3
212
1 name "v1"
2 name "v2"
3 name "v3"
255.255.255.0
255.255.255.0
255.255.255.0
Avaya P333R-LB User's Guide