
webservers would see only the IP address of the D-Link Firewall.
Example 10.3. Setting up SLB
In this example server load balancing is to be done between 2 HTTP webservers which are situated behind the
D-Link Firewall. The 2 webservers have the private IP addresses 192.168.1.10 and 192.168.1.11 respectively.
The default SLB values for monitoring, distribution method and stickiness are used.
A NAT rule is used in conjunction with the SLB_SAT rule so that clients behind the firewall can access the
webservers. An Allow rule is used to allow access by external clients.
Web Interface
A. Create an Object for each of the webservers:
1.
Go to Objects > Address Book > Add > IP Address
2.
Enter a suitable name, for example server1
3.
Enter the IP Address as 192.168.1.10
4.
Click OK
5.
Repeat the above to create an object called server2 for the 192.168.1.11 IP address
B. Create a Group which contains the 2 webserver objects:
1.
Go to Objects > Address Book > Add > IP4 Group
2.
Enter a suitable name, for example server_group
3.
Add server1 and server2 to the group
4.
Click OK
C. Specify the SLB_SAT IP rule:
1.
Go to Rules > IP Rule Sets > main > Add > IP Rule
2.
Enter:
•
Name: Web_SLB
•
Action: SLB_SAT
•
Service: HTTP
•
Source Interface: any
•
Source Network: all-nets
•
Destination Interface: core
•
Destination Network: ip_ext
3.
Select tab SAT SLB
4.
Under Server Addresses add server_group to Selected
5.
Click OK
D. Specify a matching NAT IP rule for internal clients:
1.
Go to Rules > IP Rule Sets > main > Add > IP Rule
2.
Enter:
•
Name: Web_SLB_NAT
•
Action: NAT
•
Service: HTTP
•
Source Interface: lan
10.4.6. SLB_SAT Rules
Chapter 10. Traffic Management
406
Summary of Contents for 800 - DFL 800 - Security Appliance
Page 24: ...1 3 NetDefendOS State Engine Packet Flow Chapter 1 NetDefendOS Overview 24 ...
Page 69: ...2 6 4 Restore to Factory Defaults Chapter 2 Management and Maintenance 69 ...
Page 121: ...3 9 DNS Chapter 3 Fundamentals 121 ...
Page 181: ...4 7 5 Advanced Settings for Transparent Mode Chapter 4 Routing 181 ...
Page 192: ...5 5 IP Pools Chapter 5 DHCP Services 192 ...
Page 282: ...6 7 Blacklisting Hosts and Networks Chapter 6 Security Mechanisms 282 ...
Page 300: ...mechanism 7 3 7 SAT and FwdFast Rules Chapter 7 Address Translation 300 ...
Page 301: ...7 3 7 SAT and FwdFast Rules Chapter 7 Address Translation 301 ...
Page 318: ...8 3 Customizing HTML Pages Chapter 8 User Authentication 318 ...
Page 322: ...ALG 9 1 5 The TLS Alternative for VPN Chapter 9 VPN 322 ...
Page 377: ...Management Interface Failure with VPN Chapter 9 VPN 377 ...
Page 408: ...10 4 6 SLB_SAT Rules Chapter 10 Traffic Management 408 ...
Page 419: ...11 5 HA Advanced Settings Chapter 11 High Availability 419 ...
Page 426: ...12 3 5 Limitations Chapter 12 ZoneDefense 426 ...
Page 449: ...13 9 Miscellaneous Settings Chapter 13 Advanced Settings 449 ...