Cisco Systems OL-5650-02 manual Config# ip firewall 1 192.168.28.1 192.168.27.1

Chapter 5 Configuring Firewall Load Balancing

Configuring FWLB

To configure CSS-A (the client side of the network configuration) as shown in Figure 5-1:

1.Use the ip firewall command to define firewall 1. For example:

(config)# ip firewall 1 192.168.28.1 192.168.27.1 192.168.27.3

2.Use the ip route command to define the static route for firewall 1. For example:

(config)# ip route 192.168.2.0/24 firewall 1

3.Use the ip firewall command to define firewall 2. For example:

(config)# ip firewall 2 192.168.28.2 192.168.27.2 192.168.27.3

4.Use the ip route command to define the static route for firewall 2. For example:

(config)# ip route 192.168.2.0/24 firewall 2

To configure CSS-B (the server side of the network configuration) as shown in Figure 5-1:

1.Use the ip firewall command to define firewall 1. For example:

(config)# ip firewall 1 192.168.27.1 192.168.28.1 192.168.28.3

2.Use the ip route command to define the static route for firewall 1. For example:

(config)# ip route 0.0.0.0/0 firewall 1

3.Use the ip firewall command to define firewall 2. For example:

(config)# ip firewall 2 192.168.27.2 192.168.28.2 192.168.28.3

4.Use the ip route command to define the static route for firewall 2. For example:

(config)# ip route 0.0.0.0/0 firewall 2

Firewall configurations are displayed in the IP portion of the running-config. For example:

(config)# show running-config

	Cisco Content Services Switch Security Configuration Guide
5-8	OL-5650-02