Alteon Application Switch Operating System Application Guide
Load Balancing Special Services
Document ID: RDWR-ALOS-V2900_AG1302
309
8. Enable client and server ports and enable filtering on client ports.
9. Apply and save your configuration.
Intrusion Detection System (IDS) SLB
The Intrusion Detection System (IDS) is a type of security management system for computers and
networks. An Intrusion Detection System gathers and analyzes information from various areas
within a computer or a network to identify possible security breaches, which include both intrusions
(attacks from outside the organization) and misuse (attacks from within the organization).
This section includes the following topics:
•
How Intrusion Detection Server Load Balancing Works, page 309
•
Setting Up IDS Servers, page 311
•
IDS Load Balancing Configurations, page 311
Intrusion detection functions include:
•
Monitoring and analyzing both user and system activities
•
Analyzing system configurations and vulnerabilities
•
Assessing system and file integrity
•
Recognizing patterns typical of attacks
•
Analyzing abnormal activity patterns
•
Tracking user policy violations
Intrusion detection devices inspect every packet before it enters a network, looking for any signs of
an attack. The attacks are recorded and logged in an attempt to guard against future attacks and to
record the information about the intruders.
IDS SLB helps scale intrusion detection systems since it is not possible for an individual server to
scale information being processed at Gigabit speeds.
How Intrusion Detection Server Load Balancing Works
Alteon can forward a copy of the IP packets to an Intrusion Detection server. IDS SLB must be
enabled on the incoming ports and enabled for the groups containing the IDS real servers. The IDS
SLB-enabled device copies packets entering IDS-enabled ports. An SLB session is created on Alteon
to a group of intrusion detection servers. The IDS server is selected based on the IDS group metric.
>> # /cfg/slb/port 1/client ena
>> SLB port 1# filt ena
>> SLB port 1# /cfg/slb/port 1
>> SLB port 2# /cfg/slb/server ena
>> SLB port 1# /cfg/slb/port 2
>> SLB port 2# /cfg/slb/server ena
>> SLB port 1# /cfg/slb/port 3
>> SLB port 3# /cfg/slb/server ena
>> SLB port 3# /cfg/slb/port 4
>> SLB port 4# /cfg/slb/server ena
(Enable filtering on Port 1)
>> SLB port 4# apply
>> SLB port 4# save
