Alteon Application Switch Operating System Application Guide
Firewall Load Balancing
Document ID: RDWR-ALOS-V2900_AG1302
661
Configuring Basic FWLB
This procedures in the example refer to
Figure 109 - Basic FWLB Configuration Example, page 661
.
While two or four Alteons can be used, this example uses a simple network topology with only two
Alteons, one on each side of the firewalls.
Figure 109: Basic FWLB Configuration Example
To configure the dirty-side Alteon
1. Configure VLANs.
Note:
Alternately, if you are using hubs between Alteons and firewalls and you do not want to
configure VLANs, you must enable the Spanning Tree Protocol (STP) to prevent broadcast loops.
2. Define the dirty-side IP interface.
In addition to one IP interface for general Alteon management, there must be one dirty-side IP
interface for each firewall path being load balanced. Each must be on a different subnet.
>> # /cfg/l3/if 1
(Select IP Interface [IF] 1)
>> IP Interface 1# addr 192.16.12.1
(Set address for Alteon
management)
>> IP Interface 1# mask 255.255.255.0
(Set subnet mask for IF 1)
>> IP Interface 1# ena
(Enable IF 1)
>> IP Interface 1# /cfg/l3/if 2
(Select IF 2)
>> IP Interface 2# addr 10.1.1.1
(Set the IP address for IF 2)
>> IP Interface 2# mask 255.255.255.0
(Set subnet mask for IF 2)
>> IP Interface 2# ena
(Enable IF 2)
>> IP Interface 2# /cfg/l3/if 3
(Select IF 3)
