Cisco Systems OL-5650-02 Example of Firewall and Route Configurations, CSS-OUT-L Configuration

Chapter 5 Configuring Firewall Load Balancing

Configuring FWLB with VIP and Virtual Interface Redundancy

Example of Firewall and Route Configurations

The following ip firewall and ip route example configurations are valid for

Figure 5-2with four active firewalls.

CSS-OUT-L Configuration

ip firewall 1			10.2.200.1 10.3.200.1 10.3.1.224
ip firewall 2			10.2.200.2 10.3.200.2 10.3.1.224
ip	firewall	3	10.2.200.3	10.3.200.3	10.3.1.224
ip	firewall	4	10.2.200.4	10.3.200.4	10.3.1.224

ip firewall 11	10.2.200.11 10.3.200.11	10.3.1.223
ip firewall 12	10.2.200.12 10.3.200.12	10.3.1.223
ip firewall 13	10.2.200.13 10.3.200.13	10.3.1.223
ip firewall 14	10.2.200.14 10.3.200.14	10.3.1.223
ip route 10.3.0.0 255.255.0.0 firewall		1	1
ip route 10.3.0.0 255.255.0.0 firewall		2	1
ip route 10.3.0.0 255.255.0.0 firewall		3	1
ip route 10.3.0.0 255.255.0.0 firewall		4	1
ip route 10.3.0.0 255.255.0.0 firewall		11	10
ip route 10.3.0.0 255.255.0.0 firewall		12	10
ip route 10.3.0.0 255.255.0.0 firewall		13	10
ip route 10.3.0.0 255.255.0.0 firewall		14	10

CSS-OUT-R Configuration

ip firewall 11 10.2.200.11 10.3.200.11 10.3.1.223 ip firewall 12 10.2.200.12 10.3.200.12 10.3.1.223 ip firewall 13 10.2.200.13 10.3.200.13 10.3.1.223 ip firewall 14 10.2.200.14 10.3.200.14 10.3.1.223 ip firewall 1 10.2.200.1 10.3.200.1 10.3.1.224 ip firewall 2 10.2.200.2 10.3.200.2 10.3.1.224 ip firewall 3 10.2.200.3 10.3.200.3 10.3.1.224 ip firewall 4 10.2.200.4 10.3.200.4 10.3.1.224 ip route 10.3.0.0 255.255.0.0 firewall 11 1

ip route 10.3.0.0 255.255.0.0 firewall 12 1 ip route 10.3.0.0 255.255.0.0 firewall 13 1 ip route 10.3.0.0 255.255.0.0 firewall 14 1 ip route 10.3.0.0 255.255.0.0 firewall 1 10 ip route 10.3.0.0 255.255.0.0 firewall 2 10 ip route 10.3.0.0 255.255.0.0 firewall 3 10 ip route 10.3.0.0 255.255.0.0 firewall 4 10

	Cisco Content Services Switch Security Configuration Guide
OL-5650-02		5-13