Radware Alteon - Page 675

Alteon Application Switch Operating System Application Guide
Firewall Load Balancing
Document ID: RDWR-ALOS-V2900_AG1302 675
Configure the Primary Clean-Side Alteon
The following is an example configuration for a primary clean-side Alteon.
To configure the primary clean-side Alteon
1. Configure VLANs on the primary clean-side Alteon.
Two VLANs are required. VLAN 3 includes the firewall port and interswitch connection port. VLAN
4 includes the port that attaches to the real servers.
2. Configure IP interfaces on the primary clean-side Alteon.
3. Turn STP off for the primary clean-side Alteon.
Spanning Tree Protocol is disabled because VLANs prevent broadcast loops.
4. Configure static routes on the primary clean-side Alteon.
Four static routes are needed:
— To primary dirty-side IF 2 via Firewall 1 using clean-side IF 2
— To primary dirty-side IF 3 via Firewall 2 using clean-side IF 3
— To secondary dirty-side IF 2 via Firewall 1 using clean-side IF 2
— To secondary dirty-side IF 3 via Firewall 2 using clean-side IF 3
The static route
add command uses the following format:
>> /cfg/l2/vlan 2
>> add 25
>> add 28
>> ena
>> /cfg/l2/vlan 4
>> add 26
>> ena
>> /cfg/l3/if 1
>> mask 255.255.255.0
>> addr 10.10.4.10
>> vlan 4
>> ena
>> /cfg/l3/if 2
>> mask 255.255.255.0
>> addr 10.10.3.1
>> vlan 3
>> ena
>> /cfg/l3/if 3
>> mask 255.255.255.255
>> addr 10.10.3.2
>> vlan 3
>> ena
>> /cfg/l2/stg #/off
add <destination address> <dest. mask> <gateway address> <source interface>