11-18
Catalyst 6500 Series Content Switching Module Configuration Note
OL-4612-01
Chapter 11 Configuring Firewall Load Balancing
Configuring Regular Firewall Load Balancing
Configuring CSM A (Regular Firewall Example)
To create the regular configuration example, perform the following configuration tasks for CSM A:
• Creating VLANs on Switch A, page 11-18
• Configuring VLANs on CSM A, page 11-18
• Configuring Server Farms on CSM A, page 11-19
• Configuring Virtual Servers on CSM A, page 11-20
Note Although the configuration tasks are the same for both CSM A and CSM B, the steps, commands, and
parameters that you enter are different.
Creating VLANs on Switch A
The example, shown in Figure 11-7, requires that you create two VLANs on Switch A.
Note This example assumes that the CSMs are in separate Catalyst 6500 series switch chassis. If they are in
the same chassis, all of the VLANs can be created on the same Catalyst 6500 series switch console.
To configure VLANs on Switch A, perform this task:
Configuring VLANs on CSM A
To configure the two VLANs, perform this task:
Command Purpose
Step 1
Switch-A(config)# vlan
Enters the VLAN mode
1
.
1. Do this step on the switch console of the switch that contains CSM A.
Step 2
Switch-A(vlan)# vlan 100
Creates VLAN 100
2
.
2. VLAN 100 connects CSM A to the Internet.
Step 3
Switch-A(vlan)# vlan 101
Creates VLAN 101
3
.
3. VLAN 101 connects CSM A to the insecure side of the firewalls.
Command Purpose
Step 1
Switch-A(config)# module csm 5
Enters multiple module configuration mode and
specifies that CSM A is installed in slot 5.
Step 2
Switch-A(config-module-csm)# vlan 100
client
Specifies VLAN 100 as the VLAN that is being
configured, identifies it as a client VLAN, and enters
VLAN configuration mode.
Step 3
Switch-A(config-slb-vlan-client)# ip
address 100.0.0.25 255.255.255.0
Specifies an IP address and netmask for VLAN 100.
Step 4
Switch-A(config-slb-vlan-client)# gateway
100.0.0.13
Configures a gateway IP address for the router on the
Internet side of CSM A.
Step 5
Switch-A(config-slb-vlan-client)# exit
Returns to multiple module configuration mode.