Alteon Application Switch Operating System Application Guide
Firewall Load Balancing
Document ID: RDWR-ALOS-V2900_AG1302
667
14. Create the redirection filter. This filter redirects outbound traffic, load balancing it among the
defined real servers in the group. In this case, the real servers represent IP interfaces on the
dirty-side Alteon.
15. Add the filters to the ingress ports for the outbound packets.
Redirection filters are needed on all the ingress ports on the clean-side Alteon. Ingress ports are
any that attach to real servers or internal clients on the clean-side of the network. In this case,
two real servers are attached to the clean-side Alteon on ports 4 and 5.
16. Define static routes to the dirty-side IP interfaces, using the firewalls as gateways.
One static route is required for each firewall path being load balanced. In this case, two paths
are required: one that leads to dirty-side IF 2 (10.1.1.1) through the first firewall (10.1.3.10) as
its gateway and one that leads to dirty-side IF 3 (10.1.2.1) through the second firewall
(10.1.4.10) as its gateway.
Note:
Configuring static routes for FWLB does not require IP forwarding to be turned on.
Note:
When adding an IPv4 static route, if you are using FWLB and you define two IP
interfaces on the same subnet, where one IP interface has a subnet of the host which is also
included in the subnet of the second interface, you must specify the interface.
>> Filter 10# action allow
(Allow traffic)
>> Filter 10# ena
(Enable the filter)
>> Filter 10# /cfg/slb/filt 15
(Select Filter 15)
>> Filter 15# sip any
(From any source IP address)
>> Filter 15# dip any
(To any destination IP address)
>> Filter 15# proto any
(For any protocol)
>> Filter 15# action redir
(Perform redirection)
>> Filter 15# group 1
(To real server Group 1)
>> Filter 15# ena
(Enable the filter)
>> Filter 15# /cfg/slb/port 4
(Select Ingress Port 4)
>> SLB Port 4# add 10
(Add the filter to the ingress port)
>> SLB Port 4# add 15
(Add the filter to the ingress port)
>> SLB Port 4$ filt ena
(Enable filtering on the port)
>> SLB Port 4# /cfg/slb/port 5
(Select Ingress Port 5)
>> SLB Port 5# add 10
(Add the filter to the ingress port)
>> SLB Port 5# add 15
(Add the filter to the ingress port)
>> SLB Port 5# filt ena
(Enable filtering on the port)
>> SLB Port 5# /cfg/l3/route/ip4
>> IP Static Route# add 10.1.1.1 255.255.255.255 10.1.3.10
>> IP Static Route# add 10.1.2.1 255.255.255.255 10.1.4.10
