Avaya P333R-LB, Installation And Configuration Manual

Page: 144 / 218

Chapter 14 Load Balancing in the P333R-LB
2 Avaya P333R-LB User’s Guide
of failure.
P333R-LB supports both bridging and two types of routing firewalls: transparent
and non-transparent.
Transparent Routing Firewall Load Balancing
This section explains how the P333R-LB supports Transparent Routing FWLB, and
includes configuration examples.
Implementation
For Transparent Routing FWLB, the load balancer receives a packet, makes a load
balancing decision, and forwards the packet to a firewall. The firewall does not
perform Network Address Translation (NAT) on the packets; the source and
destination IP addresses are not changed.
Two P333R-LBs are required for Transparent Routing FWLB, one on each side of the
firewalls. One device intercepts traffic between the protected zone and the firewall,
and the second device intercepts traffic between the unprotected zone and the
firewall.
Transparent Routing firewalls act as "next hop" devices from the perspective of the
P333R-LB. After one of the firewalls in a group is selected, normal routing to that
firewall takes place.
The P333R-LB performs an “intelligent routing” decision, based on the Load
Balancing criteria, and replaces the MAC address in the packets by the MAC
address of the selected firewall.
P333R-LB enables you to route packets destined to a Demilitarized Zone (DMZ). A
DMZ is a portion of the client’s network, apart from the client’s LAN, where remote
access is allowed. After creating a DMZ, a third load balancer is installed, which
routes packets to the DMZ.