Radware Alteon, Инструкция по применению

Страница: 191 / 842

Alteon Application Switch Operating System Application Guide
Server Load Balancing
Document ID: RDWR-ALOS-V2900_AG1302
191
When client NAT is enabled for a virtual service, you can disable NAT or specify a different proxy IP
address for any real server connected to that service. For more information, see
Proxy IP Address
for Real Servers, page 194 .
Additional NAT capabilities on virtual services include:
• Client IP persistency in selecting a proxy IP address—The same proxy IP address is used to
redirect all connections from a specific client using the same proxy IP address. Available when a
proxy IP subnet or network class is configured per virtual service or real server.
• Host Preservation—Preserves the host bits of an IP address, and translates only the network
prefix bits of the IP address. This is useful when the host number is used to identify users
uniquely. For more information, see
Host Preservation, page 192 .
Note: Enable proxy processing on the client ports to perform client NAT on a virtual service.
Port or VLAN-based Proxy IP Addresses
Proxy IP addresses can be associated with physical ports or VLANs. You define the proxy IP mode
per virtual service, and determine whether to perform client NAT using the proxy addresses
configured on the ingress interface (port or VLAN), or on the egress interface. By default, ingress
interface addresses are used.
You must define whether Alteon uses port-based or VLAN-based proxy IP addresses; they cannot
both be active on the same Alteon.
When multiple addresses are configured per port or VLAN interface, the proxy IP for each connection
is selected in round-robin mode.
Notes
• WAN Link Load Balancing (see WAN Link Load Balancing, page 631 ) requires port-based proxy
IP addresses.
• Use an egress port or a VLAN-based proxy IP address for Web Cache Redirection (WCR) filtering.
You can configure up to 1024 port or VLAN-based proxy IP addresses (IPv4 or IPv6) per Alteon, and
up to 32 per single port or VLAN interface.
To configure a virtual service to use ingress port-based proxy IP addresses
1. Configure proxy IP addresses on client ports.
2. Enable proxy capability on the client ports.
3. Configure real servers, groups, and a virtual service.
>> # /cfg/slb/pip/type port
(Select a port-based PIP address)
>> # /cfg/slb/pip/add
(Add an IPv4 PIP address; use
add6 for an IPv6 address)
Enter Proxy IP address: 10.10.10.1
Enter port <1 to 28> or block <first-last>:
e.g. 1 2 3-10
(Add PIP address to ports 1 to 3)
New pending: 1: 10.10.10.1 port 1-3