Cisco catalyst 6500 series Configuration Note page 143

Chapter 11 Configuring Firewall Load Balancing
2. This step is required when configuring a server farm that contains a forwarding policy rather than real servers.
3. OUTSIDE-SF contains the two alias IP addresses of CSM A as the real servers allowing traffic from the intranet to reach
CSM A.
4. This step is required when configuring a server farm that contains a forwarding policy rather than real servers.
5. SERVERS-SF contains the IP addresses of the real servers located within the intranet.
Configuring Virtual Servers on CSM B
To configure three virtual servers on CSM, perform this task:
Command
Step 1
Switch-B(config)# module csm 6
Step 2
Switch-B(config-module-csm)# vserver
FORWARD-VS-102
Step 3
Switch-B(config-slb-vserver)# virtual
0.0.0.0 0.0.0.0 any
Step 4
Switch-B(config-slb-vserver)# vlan 102
Step 5
Switch-B(config-slb-vserver)# serverfarm
FORWARD-SF
Step 6
Switch-B(config-slb-vserver)# inservice
Step 7
Switch-B(config-slb-vserver)# exit
Step 8
Switch-B(config-module-csm)# vserver
FORWARD-VS-104
Step 9
Switch-B(config-slb-vserver)# virtual
0.0.0.0 0.0.0.0 any
Step 10
Switch-B(config-slb-vserver)# vlan 104
Step 11
Switch-B(config-slb-vserver)# serverfarm
FORWARD-SF
Step 12
Switch-B(config-slb-vserver)# inservice
Step 13
Switch-B(config-slb-vserver)# exit
Step 14
Switch-B(config-module-csm)# vserver
INSIDE-VS
Step 15
Switch-B(config-slb-vserver)# virtual
0.0.0.0 0.0.0.0 any
Step 16
Switch-B(config-slb-vserver)# vlan 20
OL-4612-01
Purpose
Enters multiple module configuration mode and
specifies that CSM B is installed in slot 6.
Specifies FORWARD-VS as the virtual server that is
being configured and enters virtual server
configuration mode.
Specifies a match for any IP address and any
1
protocol .
Specifies that the virtual server will only accept
traffic arriving on VLAN 102, which is traffic
arriving from the secure side of the Firewall 1.
Specifies the server farm for this virtual server
Enables the virtual server.
Returns to multiple module configuration mode.
Specifies FORWARD-VS
is being configured and enters virtual server
configuration mode.
Specifies a match for any IP address and any
1
protocol .
Specifies that the virtual server will only accept
traffic arriving on VLAN 104, which is traffic
arriving from the secure side of the Firewall 2.
Specifies the server farm for this virtual server
Enables the virtual server.
Returns to multiple module configuration mode.
Specifies INSIDE-VS
being configured and enters virtual server
configuration mode.
Specifies a match for any IP address and any
1
protocol .
Specifies that the virtual server will only accept
traffic arriving on VLAN 20, which is traffic arriving
from the intranet.
Catalyst 6500 Series Content Switching Module Configuration Note
Configuring Stealth Firewall Load Balancing
3
as the virtual server that
4
as the virtual server that is
2
.
2
.
11-15