Cisco catalyst 6500 series Configuration Note page 138

Configuring Stealth Firewall Load Balancing
Command
Step 8
Switch-A(config-slb-vlan-server)# alias
10.0.101.100 255.255.255.0
Step 9
Switch-A(config-slb-vlan-server)# exit
Step 10
Switch-A(config-module-csm)# vlan 103
server
Step 11
Switch-A(config-slb-vlan)# ip address
10.0.102.35 255.255.255.0
Step 12
Switch-A(config-slb-vlan)# alias
10.0.102.100 255.255.255.0
1. This step provides a target for CSM B to use in making a load-balancing decision.
Configuring Server Farms on CSM A
Note
To configure two server farms on CSM A, perform this task:
Command
Step 1
Switch-A(config)# module csm 5
Step 2
Switch-A(config-module-csm)# serverfarm
FORWARD-SF
Step 3
Switch-A(config-slb-sfarm)# no nat server
Step 4
Switch-A(config-slb-sfarm)# predictor
forward
Step 5
Switch-A(config-slb-sfarm)# exit
Step 6
Switch-A(config-module-csm)# serverfarm
TO-INSIDE-SF
Step 7
Switch-A(config-slb-sfarm)# no nat server
Step 8
Switch-A(config-slb-sfarm)# predictor
hash address source 255.255.255.255
Step 9
Switch-A(config-slb-sfarm)# real
10.0.101.200
Step 10
Switch-A(config-slb-real)# inservice
Step 11
Switch-A(config-slb-real)# exit
Catalyst 6500 Series Content Switching Module Configuration Note
11-10
Because the IP addresses of CSM B are listed in the INSIDE-SF server farm as real servers, CSM
A will load balance the two firewalls that exist in the path to CSM B.
Chapter 11 Configuring Firewall Load Balancing
Purpose
Specifies an alias IP address and netmask for VLAN
1
101 .
Returns to VLAN configuration mode.
Specifies VLAN 103 as the VLAN that is being
configured, identifies it as a server VLAN, and
enters VLAN configuration mode.
Specifies an IP address and netmask for VLAN 103.
Specifies an alias IP address and netmask for VLAN
1
103 .
Purpose
Enters multiple module configuration mode and
specifies that CSM A is installed in slot 5.
Creates and names the FORWARD-SF
(actually a forwarding policy) and enters server farm
configuration mode.
Disables the NAT of server IP addresses and port
2
numbers .
Forwards traffic in accordance with its internal
routing tables rather than a load-balancing
algorithm.
Returns to multiple module configuration mode.
Creates and names the INSIDE-SF
will contain alias IP addresses rather than real
servers) and enters server farm configuration mode.
Disables the NAT of server IP address and port
4
number .
Selects a server using a hash value based on the
5
source IP address .
Identifies the alias IP address of CSM B that lies on
the path to Firewall 1 as a real server and enters real
server configuration submode.
Enables the firewall.
Returns to server farm configuration mode.
1
server farm
3
server farm (that
OL-4612-01