11-17
Catalyst 6500 Series Content Switching Module Configuration Note
OL-4612-01
Chapter 11 Configuring Firewall Load Balancing
Configuring Regular Firewall Load Balancing
Figure 11-7 Regular Firewall Configuration Example
Figure 11-7 shows two regular firewalls (Firewall 1 and Firewall 2) located between two CSMs
(CSM A and CSM B). Traffic enters and exits the firewalls through shared VLANs (VLAN 101 and
VLAN 201). Both regular firewalls have unique addresses on each shared VLAN.
VLANs provide connectivity to the Internet (VLAN 100), the internal network (VLAN 200), and to
internal server farms (VLAN 20).
The CSM balances traffic among regular firewalls as if they were real servers. Regular firewalls are
configured in server farms with IP addresses like real servers. The server farms to which regular firewalls
belong are assigned a load-balancing predictor and are associated with virtual servers.
Regular Firewall Configuration Example
The regular firewall configuration example contains two CSMs (CSM A and CSM B) installed in
separate Catalyst 6500 series switches.
Note You can use this example when configuring two CSMs in the same Catalyst 6500 series switch chassis.
You can also use this example when configuring a single CSM in a single switch chassis, assuming that
you specify the slot number of that CSM when configuring both CSM A and CSM B.
Item Traffic Direction Arrives On Exits On
1 To intranet VLAN 100 VLANs 101
2 To intranet VLANs 201 VLAN 200 and 20
3 To Internet VLAN 200 and 20 VLANs 201
4 To Internet VLANs 101 VLAN 100
VLAN 100
VLAN 20
Catalyst 6500
CSM-A
IP address
10.1.0.26
IP address
200.0.0.x
IP address
100.0.0.25
IP address
100.0.0.3
IP address
100.0.0.4
IP address
200.0.0.3
IP address
200.0.0.4
IP address
200.0.0.26
Catalyst 6500
CSM-B
Internet
63910
VLAN 101 VLAN 201
VLAN 200
Firewall 1
Firewall 2
Traffic to
Intranet
Traffic to
Internet
1
2
3
4
IP address
10.1.0.x
Internal
network
IP address
200.0.0.x
IP address
100.0.0.13
Router
To Next Page
Loading...
Need help?
General