Radware Alteon, Инструкция по применению

Страница: 317 / 842

Alteon Application Switch Operating System Application Guide
Load Balancing Special Services
Document ID: RDWR-ALOS-V2900_AG1302
317
8. Enable IDS on the client and server processing ports. This enables frames ingressing the port to
be copied to the IDS servers.
In addition to enabling IDS at the port level, a filter must be configured to create a session entry
for non-SLB frames ingressing the port. IDS load balancing requires a session entry to be
created to store the information regarding to which IDS server to send traffic.
9. Create an allow filter and configure the filter with the idshash metric.
The IDS hash metric is set to hash on both the source and destination IP addresses. Hashing on
both source and destination IP address ensures that the returning traffic goes to the same IDS
server. By default, the IDS hash metric hashes on the source IP address only.
10. Apply the filter to ports 2, 3, 4 and 25 only. Enable filter processing on all ports that have IDS
enabled.
If you add the allow filter to the client port 25, Alteon hashes on the client IP and virtual server
IP addresses for both client and server frames. This ensures that both client and server traffic
belonging to the same session is sent to the same IDS server. If you do not add the allow filter
on port 25, Alteon hashes on the client IP only for client frames and hashes on the client IP and
virtual server IP addresses for server frames.
>># /cfg/slb/port 25/idslb ena
(Enable IDS SLB for port 25)
>>SLB port 25# /cfg/slb/port 2/idslb ena
(Enable IDS SLB for port 2)
>>SLB port 2# /cfg/slb/port 3/idslb ena
(Enable IDS SLB for port 3)
>>SLB port 3# /cfg/slb/port 4/idslb ena
(Enable IDS SLB for port 4)
>> # /cfg/slb/filt 2048
(Select the menu for Filter 2048)
>> Filter 2048# sip any
(From any source IP address)
>> Filter 2048# dip any
(To any destination IP address)
>> Filter 2048# action allow
(Allow matching traffic to pass)
>> Filter 2048# ena
(Enable the filter)
>> Filter 2048# adv/idshash both
(Set the hash metric parameter)
>> # /cfg/slb/port 2
(Select the port menu)
>> SLB Port 2# add 2048
(Apply the filter to port 2)
>> SLB Port 2# filt ena
(Enable the filter)
>> SLB Port 2# /cfg/slb/port 3
(Select port 3)
>> SLB Port 3# add 2048
(Apply the filter to port 3)
>> SLB Port 3# filt ena
(Enable the filter)
>> SLB Port 3# /cfg/slb/port 4
(Select port 4)
>> SLB Port 4# add 2048
(Apply the filter to port 4)
>> SLB Port 4# filt ena
(Enable the filter)
>> SLB Port 4# /cfg/slb/port 25
(Select port 25)
>> SLB Port 25# add 2048
(Apply the filter to port 25)
>> SLB Port 25# filt ena
(Enable the filter)