Alteon Application Switch Operating System Application Guide
Firewall Load Balancing
670
Document
ID:
RDWR-ALOS-V2900_AG1302
Configuring Four-Subnet FWLB
Figure 112 - Example Four-Subnet FWLB Configuration, page 670
illustrates an example network
for four-subnet FWLB. While other complex topologies are possible, this example assumes a high
availability network using block (rather than diagonal) interconnections between Alteons.
Figure 112: Example Four-Subnet FWLB Configuration
Note:
The port designations of both dirty-side Alteons are identical, as are the port designations of
both clean-side Alteons. This simplifies configuration by allowing you to synchronize the
configuration of each primary Alteon with the secondary.
Four-subnet FWLB configuration includes the following procedures:
•
Configure routers and firewalls and test them for proper operation, as explained in
and
Configure the Firewalls, page 671
.
•
Configure VLANs, IP interfaces, and static routes on all Alteons and test them, as explained in:
—
Configure the Primary Dirty-Side Alteon, page 672
—Configure FWLB groups and redirection
filters on the primary dirty-side Alteon.
—
Configure the Secondary Dirty-Side Alteon, page 673
—Configure and synchronize VRRP on
the primary dirty-side Alteon.
—
Configure the Primary Clean-Side Alteon, page 675
—Configure FWLB and SLB groups, and
add FWLB redirection filters on the primary clean-side Alteon.
—
Configure the Secondary Clean-Side Alteon, page 676
—Configure VRRP on the primary
clean-side Alteon and synchronize the secondary.
—
Verify Proper Connectivity, page 677
•
Configure secondary Alteons with VRRP support settings, as explained in:
—
Configure VRRP on the Secondary Dirty-Side Alteon, page 677
—