11-5
Catalyst 6500 Series Content Switching Module Configuration Note
OL-4612-01
Chapter 11 Configuring Firewall Load Balancing
Understanding How Firewalls Work
Figure 11-3 Regular Firewall Configuration (Single CSM)
In Figure 11-4, traffic moves through both the regular and stealth firewalls and is filtered in both
directions. The figure shows the flow from the Internet to the intranet. VLANs 5, 6, and 7 are shared
between CSM A and CSM B. On the path to the intranet, CSM A balances traffic across VLANs 5, 6,
and 7 through firewalls to CSM B. On the path to the intranet, CSM B balances traffic across VLANs 5,
6, and 7 through firewalls to CSM A.
VLAN 11
25.0.11.10
VLAN 111
25.0.11.10
IP address
25.0.11.50
IP address
25.0.11.51
IP address
25.0.11.52
IP address
25.0.12.50
IP address
25.0.12.51
IP address
25.0.12.52
VLAN 112
25.0.12.10
VLAN 12
25.0.12.10
Catalyst 6500
CSM
IP address
25.0.12.20
IP address
25.0.12.21
IP address
25.0.21.1
IP address
25.0.12.20
IP address
25.0.11.20
IP address
25.0.11.20
Internet
Intranet
Router
Firewalls
63904