Nokia Network Voyager, Справочное руководство, Страница: 362 / 700

7
Configuring Traffic Management
364 Voyager Reference Guide
VPN-1/FireWall-1) to process VPN or SecuRemote traffic but not want to
route unencrypted traffic through the cluster.For this purpose, you can use a
configuration similar to the one shown in the following diagram:
The purpose of this configuration would be to route the outgoing unencrypted
traffic through the default gateway and route the outgoing encrypted traffic
through the cluster. Traffic that passes through the cluster is NATed so that the
source address of a packet is translated to one of the addresses in the IP pool
of the cluster node that handles the connection.
To set up this configuration, you would:
!
Configure the IP pools in VPN-1/FireWall-1
! On the internal router:
VPN/SecuRemote
Traffic
Firewall A
IP Pool: 10.1.2.0/24
Firewall B
IP Pool: 10.1.3.0/24
Internal Cluster IP
Address
192.168.1.3
192.168.1.2
Primary Cluster Protocol
Network 192.168.3.0
192.168.3.1
192.168.3.2
Internal
Router
192.168.1.10 192.168.1.10
Internet
Default Gateway
192.168.1.1
192.168.1.0
Unencrypted Traffic