11-22
Catalyst 6500 Series Content Switching Module Configuration Note
OL-4612-01
Chapter 11 Configuring Firewall Load Balancing
Configuring Regular Firewall Load Balancing
Configuring Server Farms on CSM B
Note Firewall 1 and Firewall 2 secure-side IP addresses are configured as real servers in the
INSEC-SF server farm associated with CSM A.
To configure two server farms on CSM B, perform this task:
Step 6
Switch-B(config-module-csm)# vlan 20
server
Specifies VLAN 20 as the VLAN that is being
configured, identifies it as a server VLAN, and
enters VLAN configuration mode.
Step 7
Switch-B(config-slb-vlan-server)# ip
address 10.1.0.26 255.255.255.0
Specifies an IP address and netmask for VLAN 20.
Step 8
Switch-B(config-slb-vlan-server)# exit
Returns to VLAN configuration mode.
Step 9
Switch-B(config-module-csm)# vlan 200
client
Specifies VLAN 200 as the VLAN that is being
configured, identifies it as a client VLAN, and enters
VLAN configuration mode.
Step 10
Switch-B(config-slb-vlan)# ip address
200.0.0.26 255.255.255.0
Specifies an IP address and netmask for VLAN 200.
1. This step provides a target for CSM A to use in making a load-balancing decision.
Command Purpose
Command Purpose
Step 1
Switch-B(config)# module csm 6
Enters multiple module configuration mode and
specifies that CSM B is installed in slot 6.
Step 2
Switch-B(config-module-csm)# serverfarm
GENERIC-SF
Creates and names the GENERIC-SF
1
server farm
and enters server farm configuration mode.
Step 3
Switch-B(config-slb-sfarm)# real
10.1.0.101
Identifies a server in the internal server farm as a real
server, assigns it an IP address, and enters real server
configuration submode.
Step 4
Switch-B(config-slb-real)# inservice
Enables the real server.
Step 5
Switch-B(config-slb-real)# exit
Returns to server farm configuration mode.
Step 6
Switch-B(config-slb-sfarm)# real
10.1.0.102
Identifies a server in the internal server farm as a real
server, assigns it an IP address, and enters real server
configuration submode.
Step 7
Switch-B(config-slb-real)# inservice
Enables the real server.
Step 8
Switch-B(config-slb-real)# exit
Returns to server farm configuration mode.
Step 9
Switch-B(config-slb-sfarm)# exit
Returns to multiple module configuration mode.
Step 10
Switch-B(config-module-csm)# serverfarm
SEC-SF
Creates and names the SEC-SF
2
server farm and
enters server farm configuration mode.
Step 11
Switch-B(config-slb-sfarm)# no nat server
Disables the NAT of server IP address and port
number
3
.
Step 12
Switch-B(config-slb-sfarm)# predictor
hash address destination 255.255.255.255
Selects a server using a hash value based on the
destination IP address
4
.