Brocade Communications Systems ServerIron ADX 12.4.00 Servisní příručka

53-1002436-0127 January 2012®DRAFT: BROCADE CONFIDENTIALServerIron ADXFirewall Load Balancing GuideSupporting Brocade ServerIron ADX version 12.4.00

ServerIron ADX Firewall Load Balancing Guide xi53-1002436-01DRAFT: BROCADE CONFIDENTIALNotes, cautions, and danger noticesThe following notices and st

ServerIron ADX Firewall Load Balancing Guide 8953-1002436-01Configuration example for a high-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALCo

90 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for a high-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALCo

ServerIron ADX Firewall Load Balancing Guide 9153-1002436-01Configuration example for a high-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALIf

92 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALConfiguration examp

ServerIron ADX Firewall Load Balancing Guide 9353-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALFIGURE 16 Multizone

94 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALThe following comma

ServerIron ADX Firewall Load Balancing Guide 9553-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALThe following comma

96 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALThe following comma

ServerIron ADX Firewall Load Balancing Guide 9753-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone1-SI-S(config)#

98 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone1-SI-S(config-r

xii ServerIron ADX Firewall Load Balancing Guide53-1002436-01DRAFT: BROCADE CONFIDENTIALRelated publicationsThe following Brocade documents supplement

ServerIron ADX Firewall Load Balancing Guide 9953-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone2-SI-A(config)#

100 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone2-SI-S(config)

ServerIron ADX Firewall Load Balancing Guide 10153-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALCommands on zone 3

102 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone3-SI-A(config)

ServerIron ADX Firewall Load Balancing Guide 10353-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALFIGURE 17 Multizon

104 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone1-SI-A(config-

ServerIron ADX Firewall Load Balancing Guide 10553-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALThe following comm

106 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone1-SI-A(config-

ServerIron ADX Firewall Load Balancing Guide 10753-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone1-SI-S(config-

108 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone1-SI-A(config-

ServerIron ADX Firewall Load Balancing Guide 153-1002436-01DRAFT: BROCADE CONFIDENTIALChapter1ServerIron FWLB OverviewIn this chapter•Understanding Se

ServerIron ADX Firewall Load Balancing Guide 10953-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone2-SI-A(config)

110 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone2-SI-S(config-

ServerIron ADX Firewall Load Balancing Guide 11153-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIALZone3-SI-A(config)

112 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing4DRAFT: BROCADE CONFIDENTIAL

ServerIron ADX Firewall Load Balancing Guide 11353-1002436-01DRAFT: BROCADE CONFIDENTIALChapter5Configuring FWLB for NAT FirewallsIn this chapter•NAT

114 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring basic Layer 3 FWLB for NAT firewalls5DRAFT: BROCADE CONFIDENTIAL• Static tran

ServerIron ADX Firewall Load Balancing Guide 11553-1002436-01Configuring basic Layer 3 FWLB for NAT firewalls5DRAFT: BROCADE CONFIDENTIALDefining the

116 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring basic Layer 3 FWLB for NAT firewalls5DRAFT: BROCADE CONFIDENTIALSyntax: serve

ServerIron ADX Firewall Load Balancing Guide 11753-1002436-01Configuring basic Layer 3 FWLB for NAT firewalls5DRAFT: BROCADE CONFIDENTIALServerIronADX

118 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring basic Layer 3 FWLB for NAT firewalls5DRAFT: BROCADE CONFIDENTIALSyntax: [no]

2 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Understanding ServerIron FWLB1DRAFT: BROCADE CONFIDENTIALTABLE 1 Commands affected by IPv6

ServerIron ADX Firewall Load Balancing Guide 11953-1002436-01Configuration example for FWLB with Layer 3 NAT firewalls5DRAFT: BROCADE CONFIDENTIALAcce

120 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for FWLB with Layer 3 NAT firewalls5DRAFT: BROCADE CONFIDENTIALServ

ServerIron ADX Firewall Load Balancing Guide 12153-1002436-01Configuring IronClad Layer 3 FWLB for NAT5DRAFT: BROCADE CONFIDENTIALCLI commands on Serv

122 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring IronClad Layer 3 FWLB for NAT5DRAFT: BROCADE CONFIDENTIALFIGURE 19 FWLB for L

ServerIron ADX Firewall Load Balancing Guide 12353-1002436-01Configuring IronClad Layer 3 FWLB for NAT5DRAFT: BROCADE CONFIDENTIALSpecifying the partn

124 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring IronClad Layer 3 FWLB for NAT5DRAFT: BROCADE CONFIDENTIALCommands for standby

ServerIron ADX Firewall Load Balancing Guide 12553-1002436-01Configuring IronClad Layer 3 FWLB for NAT5DRAFT: BROCADE CONFIDENTIALConfiguring paths an

126 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring IronClad Layer 3 FWLB for NAT5DRAFT: BROCADE CONFIDENTIALCommands for standby

ServerIron ADX Firewall Load Balancing Guide 12753-1002436-01Configuring IronClad Layer 3 FWLB for NAT5DRAFT: BROCADE CONFIDENTIALSyntax: (IPv4) [no]

128 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring IronClad Layer 3 FWLB for NAT5DRAFT: BROCADE CONFIDENTIALConfiguring the Serv

ServerIron ADX Firewall Load Balancing Guide 353-1002436-01Understanding ServerIron FWLB1DRAFT: BROCADE CONFIDENTIALTo see examples of IPv6 configurat

ServerIron ADX Firewall Load Balancing Guide 12953-1002436-01Configuration example for IronClad FWLB with Layer 3 NAT firewalls5DRAFT: BROCADE CONFIDE

130 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for IronClad FWLB with Layer 3 NAT firewalls5DRAFT: BROCADE CONFIDE

ServerIron ADX Firewall Load Balancing Guide 13153-1002436-01Configuration example for IronClad FWLB with Layer 3 NAT firewalls5DRAFT: BROCADE CONFIDE

132 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for IronClad FWLB with Layer 3 NAT firewalls5DRAFT: BROCADE CONFIDE

ServerIron ADX Firewall Load Balancing Guide 13353-1002436-01Configuration example for IronClad FWLB with Layer 3 NAT firewalls5DRAFT: BROCADE CONFIDE

134 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for IronClad FWLB with Layer 3 NAT firewalls5DRAFT: BROCADE CONFIDE

ServerIron ADX Firewall Load Balancing Guide 13553-1002436-01DRAFT: BROCADE CONFIDENTIALChapter6Configuring FWLB and SLBIn this chapter•Configuring SL

136 ServerIron ADX Firewall Load Balancing Guide53-1002436-01FWLB and SLB configuration overview6DRAFT: BROCADE CONFIDENTIALFigure 20 shows an example

ServerIron ADX Firewall Load Balancing Guide 13753-1002436-01Configuring SLB-to-FWLB6DRAFT: BROCADE CONFIDENTIALFigure 21 shows an example of an FWLB-

138 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring SLB-to-FWLB6DRAFT: BROCADE CONFIDENTIALThe tasks under the first item (Config

4 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Understanding ServerIron FWLB1DRAFT: BROCADE CONFIDENTIALDynamic route environmentsServerIr

ServerIron ADX Firewall Load Balancing Guide 13953-1002436-01Configuration example for SLB-to-FWLB6DRAFT: BROCADE CONFIDENTIALBinding the real server

140 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for SLB-to-FWLB6DRAFT: BROCADE CONFIDENTIALThe following commands c

ServerIron ADX Firewall Load Balancing Guide 14153-1002436-01Configuring FWLB-to-SLB6DRAFT: BROCADE CONFIDENTIALServerIronADXA(config)# static-mac-add

142 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring FWLB-to-SLB6DRAFT: BROCADE CONFIDENTIAL• Configure firewall parameters:Define

ServerIron ADX Firewall Load Balancing Guide 14353-1002436-01Configuration example for FWLB-to-SLB6DRAFT: BROCADE CONFIDENTIALBinding the real server

144 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for FWLB-to-SLB6DRAFT: BROCADE CONFIDENTIALServerIronADXA(config)#

ServerIron ADX Firewall Load Balancing Guide 14553-1002436-01Configuration example for FWLB-to-SLB6DRAFT: BROCADE CONFIDENTIALServerIronADXB(config)#

146 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for FWLB-to-SLB6DRAFT: BROCADE CONFIDENTIALFigure 22 shows an examp

ServerIron ADX Firewall Load Balancing Guide 14753-1002436-01Configuration example for FWLB-to-SLB6DRAFT: BROCADE CONFIDENTIALThe following command en

148 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for FWLB-to-SLB6DRAFT: BROCADE CONFIDENTIALThe following commands a

ServerIron ADX Firewall Load Balancing Guide 553-1002436-01Understanding ServerIron FWLB1DRAFT: BROCADE CONFIDENTIALFIGURE 1 Example of FWLB pathsThis

ServerIron ADX Firewall Load Balancing Guide 14953-1002436-01Configuration example for FWLB-to-SLB6DRAFT: BROCADE CONFIDENTIALThe following commands c

150 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for FWLB-to-SLB6DRAFT: BROCADE CONFIDENTIALSI-Ext-B(config)# server

ServerIron ADX Firewall Load Balancing Guide 15153-1002436-01Configuration example for FWLB-to-SLB6DRAFT: BROCADE CONFIDENTIALSI-Int-A(config-rs-fw2)#

152 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Supporting dual homed servers in FWLB design6DRAFT: BROCADE CONFIDENTIALSI-Int-B(config-f

ServerIron ADX Firewall Load Balancing Guide 15353-1002436-01Supporting dual homed servers in FWLB design6DRAFT: BROCADE CONFIDENTIALFIGURE 23 Example

154 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Supporting dual homed servers in FWLB design6DRAFT: BROCADE CONFIDENTIALEnabling the ser

ServerIron ADX Firewall Load Balancing Guide 15553-1002436-01DRAFT: BROCADE CONFIDENTIALChapter7Viewing FWLB Configuration Details and StatisticsIn th

156 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Displaying firewall group information7DRAFT: BROCADE CONFIDENTIALThe following lines list

ServerIron ADX Firewall Load Balancing Guide 15753-1002436-01Displaying firewall group information7DRAFT: BROCADE CONFIDENTIALThe following example sh

158 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Displaying firewall group information7DRAFT: BROCADE CONFIDENTIALTCP/UDP port statisticsI

6 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Understanding ServerIron FWLB1DRAFT: BROCADE CONFIDENTIAL Firewall selectionOnce a ServerIr

ServerIron ADX Firewall Load Balancing Guide 15953-1002436-01Displaying firewall path information7DRAFT: BROCADE CONFIDENTIALIn this example, the Serv

160 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Displaying firewall path information7DRAFT: BROCADE CONFIDENTIAL33.1.1.1 23.1.1.3 15 1

ServerIron ADX Firewall Load Balancing Guide 16153-1002436-01Displaying firewall path information7DRAFT: BROCADE CONFIDENTIALTable 8 describes the inf

162 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Displaying the firewall selected by the hashing process for load balancing7DRAFT: BROCADE

ServerIron ADX Firewall Load Balancing Guide 16353-1002436-01Displaying the firewall selected by the hashing process for load balancing7DRAFT: BROCADE

164 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Displaying the firewall selected by the hashing process for load balancing7DRAFT: BROCADE

ServerIron ADX Firewall Load Balancing Guide 16553-1002436-01DRAFT: BROCADE CONFIDENTIALAppendixAAdditional Firewall ConfigurationsIn this appendix•Co

166 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring FWLB for firewalls with active-standby NICsADRAFT: BROCADE CONFIDENTIALFIGURE

ServerIron ADX Firewall Load Balancing Guide 16753-1002436-01Configuring FWLB for firewalls with active-standby NICsADRAFT: BROCADE CONFIDENTIALThe Se

168 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring FWLB for firewalls with active-standby NICsADRAFT: BROCADE CONFIDENTIALSyntax

ServerIron ADX Firewall Load Balancing Guide 753-1002436-01Understanding ServerIron FWLB1DRAFT: BROCADE CONFIDENTIALStateful FWLBA ServerIron ADX perf

ServerIron ADX Firewall Load Balancing Guide 16953-1002436-01Customizing path health checksADRAFT: BROCADE CONFIDENTIALCustomizing path health checksT

170 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Customizing path health checksADRAFT: BROCADE CONFIDENTIALEnabling Layer 4 path health ch

ServerIron ADX Firewall Load Balancing Guide 17153-1002436-01FWLB selection algorithmsADRAFT: BROCADE CONFIDENTIALThe <num> parameter specifies

172 ServerIron ADX Firewall Load Balancing Guide53-1002436-01FWLB selection algorithmsADRAFT: BROCADE CONFIDENTIALSpecifying a list of application por

ServerIron ADX Firewall Load Balancing Guide 17353-1002436-01Configuring weighted load balancingADRAFT: BROCADE CONFIDENTIALConfigure each entry in th

174 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Denying FWLB for specific applicationsADRAFT: BROCADE CONFIDENTIALSyntax: [no] weight <

ServerIron ADX Firewall Load Balancing Guide 17553-1002436-01Denying FWLB for specific applicationsADRAFT: BROCADE CONFIDENTIAL• ServerIron ADX A has

176 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Denying FWLB for specific applicationsADRAFT: BROCADE CONFIDENTIALDenying FWLBTo deny FWL

ServerIron ADX Firewall Load Balancing Guide 17753-1002436-01Configuring failover tolerance in IronClad configurationsADRAFT: BROCADE CONFIDENTIALConf

8 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Understanding ServerIron FWLB1DRAFT: BROCADE CONFIDENTIALPath health checksOne of the requi

DRAFT: BROCADE CONFIDENTIAL© 2011 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, the B-wing symbol, BigIron, DCFM, DCX, Fabric OS,

ServerIron ADX Firewall Load Balancing Guide 953-1002436-01Understanding ServerIron FWLB1DRAFT: BROCADE CONFIDENTIALThe ServerIron performs the Layer

10 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Understanding ServerIron FWLB1DRAFT: BROCADE CONFIDENTIALSyntax: show fw-health-check-stat

ServerIron ADX Firewall Load Balancing Guide 1153-1002436-01Basic FWLB topology1DRAFT: BROCADE CONFIDENTIALBasic FWLB topologyYou can configure basic

12 ServerIron ADX Firewall Load Balancing Guide53-1002436-01HA FWLB topology1DRAFT: BROCADE CONFIDENTIALHA FWLB topologyFor high availability (HA), yo

ServerIron ADX Firewall Load Balancing Guide 1353-1002436-01HA FWLB topology1DRAFT: BROCADE CONFIDENTIALFailoverIn active-active FWLB, if one of the S

14 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Multizone FWLB topology1DRAFT: BROCADE CONFIDENTIALMultizone FWLB topologyNOTEMultizone FW

ServerIron ADX Firewall Load Balancing Guide 1553-1002436-01Multizone FWLB topology1DRAFT: BROCADE CONFIDENTIALFIGURE 5 Multizone HA FWLBFWLB configur

16 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Multizone FWLB topology1DRAFT: BROCADE CONFIDENTIAL

ServerIron ADX Firewall Load Balancing Guide 1753-1002436-01DRAFT: BROCADE CONFIDENTIALChapter2Configuring Basic FWLBIn this chapter•Configuring basic

18 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration guidelines2DRAFT: BROCADE CONFIDENTIAL• You must configure a separate path o

ServerIron ADX Firewall Load Balancing Guide iii53-1002436-01DRAFT: BROCADE CONFIDENTIALContentsAbout This DocumentIn this chapter . . . . . . . . . .

ServerIron ADX Firewall Load Balancing Guide 1953-1002436-01Configuration guidelines2DRAFT: BROCADE CONFIDENTIALCommands for ServerIron ADX B (interna

20 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration guidelines2DRAFT: BROCADE CONFIDENTIALSyntax: [no] fw-name <string>Add

ServerIron ADX Firewall Load Balancing Guide 2153-1002436-01Configuration guidelines2DRAFT: BROCADE CONFIDENTIALNOTEFor many configurations, static MA

22 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for basic Layer 3 FWLB2DRAFT: BROCADE CONFIDENTIALThe <other-ip&g

ServerIron ADX Firewall Load Balancing Guide 2353-1002436-01Configuration example for basic Layer 3 FWLB2DRAFT: BROCADE CONFIDENTIALThe following comm

24 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for basic Layer 3 FWLB2DRAFT: BROCADE CONFIDENTIALServerIron ADXB(co

ServerIron ADX Firewall Load Balancing Guide 2553-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIALConfigurati

26 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIALIPv4 exampl

ServerIron ADX Firewall Load Balancing Guide 2753-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIALThe followi

28 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIALSI-External

iv ServerIron ADX Firewall Load Balancing Guide53-1002436-01DRAFT: BROCADE CONFIDENTIALChapter 2 Configuring Basic FWLBIn this chapter . . . . . . . .

ServerIron ADX Firewall Load Balancing Guide 2953-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIALIPv6 exampl

30 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIALSI-External

ServerIron ADX Firewall Load Balancing Guide 3153-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIALBasic FWLB

32 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIALCommands on

ServerIron ADX Firewall Load Balancing Guide 3353-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIALThe followi

34 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIALIPv6 exampl

ServerIron ADX Firewall Load Balancing Guide 3553-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIALSI-External

36 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration examples with Layer 3 routing support2DRAFT: BROCADE CONFIDENTIAL

ServerIron ADX Firewall Load Balancing Guide 3753-1002436-01DRAFT: BROCADE CONFIDENTIALChapter3Configuring HA FWLB In this chapter•Understanding Serve

38 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Understanding ServerIron FWLB3DRAFT: BROCADE CONFIDENTIALSession limitsTo avoid overloadin

ServerIron ADX Firewall Load Balancing Guide v53-1002436-01DRAFT: BROCADE CONFIDENTIALChapter 4 Configuring Multizone FWLBIn this chapter . . . . . .

ServerIron ADX Firewall Load Balancing Guide 3953-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALConfiguring HA active-active

40 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALFIGURE 10 HA FWLB for Layer 3

ServerIron ADX Firewall Load Balancing Guide 4153-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIAL• You must use the server par

42 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALConfiguring the management IP

ServerIron ADX Firewall Load Balancing Guide 4353-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALConfiguring the partner portU

44 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALConfiguring the router portNO

ServerIron ADX Firewall Load Balancing Guide 4553-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALThe <tcp/udp-port> para

46 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALChanging the maximum number o

ServerIron ADX Firewall Load Balancing Guide 4753-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALAdding the firewalls to the f

48 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALHashing load balance metric i

vi ServerIron ADX Firewall Load Balancing Guide53-1002436-01DRAFT: BROCADE CONFIDENTIALConfiguration example for IronClad FWLB with Layer 3 NAT firew

ServerIron ADX Firewall Load Balancing Guide 4953-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIAL• The other ServerIron ADX’s

50 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALTo configure the static MAC a

ServerIron ADX Firewall Load Balancing Guide 5153-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALSyntax: [no] server fw-strict

52 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALThe following commands config

ServerIron ADX Firewall Load Balancing Guide 5353-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALCommands on ServerIron ADX SI

54 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALCommands on ServerIron ADX SI

ServerIron ADX Firewall Load Balancing Guide 5553-1002436-01Configuring HA active-active FWLB3DRAFT: BROCADE CONFIDENTIALCommands on ServerIron ADX SI

56 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring active-active HA FWLB3DRAFT: BROCADE CONFIDENTIALConfiguring active-active HA

ServerIron ADX Firewall Load Balancing Guide 5753-1002436-01Configuring active-active HA FWLB3DRAFT: BROCADE CONFIDENTIAL• In the topology presented i

58 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring active-active HA FWLB3DRAFT: BROCADE CONFIDENTIALSI-StandbyA(config-rs-FW4)# s

ServerIron ADX Firewall Load Balancing Guide vii53-1002436-01DRAFT: BROCADE CONFIDENTIALAppendix A Additional Firewall ConfigurationsIn this appendix.

ServerIron ADX Firewall Load Balancing Guide 5953-1002436-01Configuring active-active HA FWLB3DRAFT: BROCADE CONFIDENTIALSI-StandbyB(config)#server fw

60 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring active-active HA FWLB3DRAFT: BROCADE CONFIDENTIALInternal ServerIron ADX C (In

ServerIron ADX Firewall Load Balancing Guide 6153-1002436-01Configuring active-active HA FWLB3DRAFT: BROCADE CONFIDENTIALpriority 1 router-type SI-Act

62 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring active-active HA FWLB with VRRP3DRAFT: BROCADE CONFIDENTIALSI-ActiveD(config-f

ServerIron ADX Firewall Load Balancing Guide 6353-1002436-01Configuring active-active HA FWLB with VRRP3DRAFT: BROCADE CONFIDENTIALFIGURE 12 Active-ac

64 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring active-active HA FWLB with VRRP3DRAFT: BROCADE CONFIDENTIALThe following comma

ServerIron ADX Firewall Load Balancing Guide 6553-1002436-01Configuring active-active HA FWLB with VRRP3DRAFT: BROCADE CONFIDENTIALThe following comma

66 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring active-active HA FWLB with VRRP3DRAFT: BROCADE CONFIDENTIALThe following comma

ServerIron ADX Firewall Load Balancing Guide 6753-1002436-01Configuring active-active HA FWLB with VRRP3DRAFT: BROCADE CONFIDENTIALSI-Ext-B(config-fw-

68 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring active-active HA FWLB with VRRP3DRAFT: BROCADE CONFIDENTIALSI-Int-A(config)# i

ServerIron ADX Firewall Load Balancing Guide ix53-1002436-01DRAFT: BROCADE CONFIDENTIALAbout This DocumentIn this chapter•Audience. . . . . . . . . .

ServerIron ADX Firewall Load Balancing Guide 6953-1002436-01Configuring active-active HA FWLB with VRRP3DRAFT: BROCADE CONFIDENTIALSI-Int-B(config)# s

70 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring active-active HA FWLB with VRRP3DRAFT: BROCADE CONFIDENTIAL

ServerIron ADX Firewall Load Balancing Guide 7153-1002436-01DRAFT: BROCADE CONFIDENTIALChapter4Configuring Multizone FWLB In this chapter•Zone configu

72 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring basic multizone FWLB4DRAFT: BROCADE CONFIDENTIAL• On the DMZ ServerIron ADXs,

ServerIron ADX Firewall Load Balancing Guide 7353-1002436-01Configuring basic multizone FWLB4DRAFT: BROCADE CONFIDENTIALFIGURE 13 Basic multizone FWLB

74 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for basic multizone FWLB4DRAFT: BROCADE CONFIDENTIAL• Configure a st

ServerIron ADX Firewall Load Balancing Guide 7553-1002436-01Configuration example for basic multizone FWLB4DRAFT: BROCADE CONFIDENTIALThe following co

76 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for basic multizone FWLB4DRAFT: BROCADE CONFIDENTIALIn this example,

ServerIron ADX Firewall Load Balancing Guide 7753-1002436-01Configuration example for basic multizone FWLB4DRAFT: BROCADE CONFIDENTIALCommands on Zone

78 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for basic multizone FWLB4DRAFT: BROCADE CONFIDENTIALCommands on Zone

x ServerIron ADX Firewall Load Balancing Guide53-1002436-01DRAFT: BROCADE CONFIDENTIALDocument conventionsThis section describes text formatting conve

ServerIron ADX Firewall Load Balancing Guide 7953-1002436-01Configuring highly-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALConfiguring high

80 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuring highly-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALTo configure Ser

ServerIron ADX Firewall Load Balancing Guide 8153-1002436-01Configuration example for a high-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALFa

82 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for a high-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALTh

ServerIron ADX Firewall Load Balancing Guide 8353-1002436-01Configuration example for a high-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALUs

84 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for a high-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALTh

ServerIron ADX Firewall Load Balancing Guide 8553-1002436-01Configuration example for a high-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALZo

86 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for a high-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALCo

ServerIron ADX Firewall Load Balancing Guide 8753-1002436-01Configuration example for a high-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALZo

88 ServerIron ADX Firewall Load Balancing Guide53-1002436-01Configuration example for a high-availability multizone FWLB4DRAFT: BROCADE CONFIDENTIALZo