F5 Herculon SSL Orchestrator, Настройка

Страница: 22 / 58

• In both the What are the IPv4 outbound gateway addresses? and What are the IPv6
outbound gateway addresses? fields, type both the IPv4 and IPv6 gateway addresses. Proceed to
step 18.
Click the + button to add additional addresses.
You can enter multiple gateways if you have multiple systems and wish to load balance across them.
If you do enter multiple addresses, you can also use the ratio value to control the load balancing. For
example, if you have two devices, and one handles twice as much traffic as the other, you can set the
ratio to 1 on the smaller device, and 2 on the larger one.
18. In the Non-public IPv6 networks via IPv6 gateways field, type the requested IPv6 address if you
want to route connections to any non-public IPv6 networks via the IPv6 gateways above. Enter the
prefix/mask-length (CIDR) of each network. Non-public IPv6 networks are those outside the 2000::/3
block, such as ULA networks in the fc00::/7 block.
19. In the Decrypt Zone to Ingress Device Configuration area, for Are there parallel service devices in
the decrypt zone? , select whether you want to send outbound traffic using the BIG-IP system default
route(s) or send outbound traffic through one or more service devices.
• If the system will send the traffic through its default route, which must be configured to point to
the ingress BIG-IP system, use No, send outbound traffic via the BIG-IP default route(s) and
proceed to step 22 to save.
• If your configuration includes any Layer 3 systems in the decrypt zone that must receive the
responses to traffic, use Yes, send outbound traffic via one or more service device(s) and
proceed to step 20.
20. Options to provide the outbound gateway addresses will vary, whether you selected Support IPv4
only , Support IPv6 only , or Both IPv4 and IPv6 . Type the IP addresses of the inward interface of
the first Layer 3 device in the decrypt zone or the decrypt zone gateway.
• In the What are the IPv4 decrypt zone gateway addresses? field, type the IPv4 gateway
addresses. Proceed to step 22 to save.
• In the What are the IPv6 decrypt zone gateway addresses? field, type the IPv6 gateway
addresses. Proceed to step 21.
• In both the What are the IPv4 decrypt zone gateway addresses? and What are the IPv6
outbound gateway addresses? fields, type both the IPv4 and IPv6 gateway addresses. Proceed to
step 21.
Click the + button to add additional addresses.
You can enter multiple gateways if you have multiple systems and want to load balance across them.
If you do enter multiple addresses, you can also use the ratio value to control the load balancing. For
example, if you have two devices, and one handles twice as much traffic as the other, you can set the
ratio to
1
on the smaller device, and
2
on the larger one.
21. In the What are the intranet networks (subnets)? field, type the IP address and mask-length in
CIDR format for intranet submasks.
Click the + button to add additional addresses. Typical IPv4 entries include
10.0.0.0/8
,
172.16.0.0/12
, and
192.168.0.0/16
.
22. Click Save .
You have now configured an egress device for a system configured for separate ingress and egress
devices.
This describes only the fields, lists, and areas needed to configure an egress device. You should complete
the other areas in General Properties before moving on to create services and service chains.
Setting Up a Basic Configuration
22