Cisco Catalyst 6500 Series Configuration Note

11-11
Catalyst 6500 Series Content Switching Module Configuration Note
OL-4612-01
Chapter 11 Configuring Firewall Load Balancing
Configuring Stealth Firewall Load Balancing
Configuring Virtual Servers on CSM A
To configure three virtual servers on CSM A, perform this task:
Step 12
Switch-A(config-slb-sfarm)# real
10.0.102.200
Identifies the alias IP address of CSM B that lies on
the path to Firewall 2 as a real server and enters real
server configuration submode.
Step 13
Switch-A(config-slb-real)# inservice
Enables the firewall.
1. FORWARD-SF is actually a route forwarding policy, not an actual server farm, that allows traffic to reach the Internet
(through VLAN 10). It does not contain any real servers.
2. This step is required when configuring a server farm that contains a forwarding policy rather than real servers.
3. INSIDE-SF contains the two alias IP addresses of CSM B listed as real servers that allow traffic from the intranet to reach
CSM B.
4. This step is required when configuring a server farm that contains firewalls.
5. We recommend that you perform this step when configuring insecure-side firewall interfaces in a server farm.
Command Purpose
Command Purpose
Step 1
Switch-A(config)# module csm 5
Enters multiple module configuration mode and
specifies that the CSM A is installed in slot 5.
Step 2
Switch-A(config-module-csm)# vserver
FORWARD-V101
Specifies FORWARD-V101
1
as the virtual server
that is being configured and enters virtual server
configuration mode.
Step 3
Switch-A(config-slb-vserver)# virtual
0.0.0.0 0.0.0.0 any
Specifies a match for any IP address and any
protocol
2
.
Step 4
Switch-A(config-slb-vserver))# vlan 101
Specifies that the virtual server will only accept
traffic arriving on VLAN 101, which is traffic
arriving from the insecure side of the firewalls.
Step 5
Switch-A(config-slb-vserver)# serverfarm
FORWARD-SF
Specifies the server farm for this virtual server
3
.
Step 6
Switch-A(config-slb-vserver)# inservice
Enables the virtual server.
Step 7
Switch-A(config-slb-vserver)# exit
Returns to multiple module configuration mode.
Step 8
Switch-A(config-module-csm)# vserver
FORWARD-V103
Specifies FORWARD-V103
4
as the virtual server
that is being configured and enters virtual server
configuration mode.
Step 9
Switch-A(config-slb-vserver)# virtual
0.0.0.0 0.0.0.0 any
Specifies a match for any IP address and any
protocol
5
.
Step 10
Switch-A(config-slb-vserver))# vlan 103
Specifies that the virtual server will only accept
traffic arriving on VLAN 103, which is traffic
arriving from the insecure side of the firewalls.
Step 11
Switch-A(config-slb-vserver)# serverfarm
FORWARD-SF
Specifies the server farm for this virtual server
3
.
Step 12
Switch-A(config-slb-vserver)# inservice
Enables the virtual server.
Step 13
Switch-A(config-slb-vserver)# exit
Returns to multiple module configuration mode.
Step 14
Switch-A(config-module-csm)# vserver
OUTSIDE-VS
Specifies OUTSIDE-VS
6
as the virtual server that is
being configured and enters virtual server
configuration mode.

Cisco Catalyst 6500 Series Specifications

General

Brand	Cisco
Model	Catalyst 6500 Series
Category	Switch
Language	English