Chapter 5 Configuring Firewall Load Balancing

Configuring FWLB with VIP and Virtual Interface Redundancy

Example of Firewall and Route Configurations

The following ip firewall and ip route example configurations are valid for

Figure 5-2with four active firewalls.

CSS-OUT-L Configuration

ip firewall 1

10.2.200.1 10.3.200.1 10.3.1.224

ip firewall 2

10.2.200.2 10.3.200.2 10.3.1.224

ip

firewall

3

10.2.200.3

10.3.200.3

10.3.1.224

ip

firewall

4

10.2.200.4

10.3.200.4

10.3.1.224

ip firewall 11

10.2.200.11 10.3.200.11

10.3.1.223

ip firewall 12

10.2.200.12 10.3.200.12

10.3.1.223

ip firewall 13

10.2.200.13 10.3.200.13

10.3.1.223

ip firewall 14

10.2.200.14 10.3.200.14

10.3.1.223

ip route 10.3.0.0 255.255.0.0 firewall

1

1

ip route 10.3.0.0 255.255.0.0 firewall

2

1

ip route 10.3.0.0 255.255.0.0 firewall

3

1

ip route 10.3.0.0 255.255.0.0 firewall

4

1

ip route 10.3.0.0 255.255.0.0 firewall

11

10

ip route 10.3.0.0 255.255.0.0 firewall

12

10

ip route 10.3.0.0 255.255.0.0 firewall

13

10

ip route 10.3.0.0 255.255.0.0 firewall

14

10

CSS-OUT-R Configuration

ip firewall 11 10.2.200.11 10.3.200.11 10.3.1.223 ip firewall 12 10.2.200.12 10.3.200.12 10.3.1.223 ip firewall 13 10.2.200.13 10.3.200.13 10.3.1.223 ip firewall 14 10.2.200.14 10.3.200.14 10.3.1.223 ip firewall 1 10.2.200.1 10.3.200.1 10.3.1.224 ip firewall 2 10.2.200.2 10.3.200.2 10.3.1.224 ip firewall 3 10.2.200.3 10.3.200.3 10.3.1.224 ip firewall 4 10.2.200.4 10.3.200.4 10.3.1.224 ip route 10.3.0.0 255.255.0.0 firewall 11 1

ip route 10.3.0.0 255.255.0.0 firewall 12 1 ip route 10.3.0.0 255.255.0.0 firewall 13 1 ip route 10.3.0.0 255.255.0.0 firewall 14 1 ip route 10.3.0.0 255.255.0.0 firewall 1 10 ip route 10.3.0.0 255.255.0.0 firewall 2 10 ip route 10.3.0.0 255.255.0.0 firewall 3 10 ip route 10.3.0.0 255.255.0.0 firewall 4 10

 

 

Cisco Content Services Switch Security Configuration Guide

 

 

 

 

 

 

OL-5650-02

 

 

5-13

 

 

 

Page 111
Image 111
Cisco Systems OL-5650-02 manual Example of Firewall and Route Configurations, CSS-OUT-L Configuration