Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing n 329212777-A, February 2002Configuring Four-Subnet FWLBAn example network for four-subnet FWLB is illustrated in Figure 13-7. While other complextopologies are possible, this example assumes a high-availability network using block (ratherthan diagonal) interconnections between switches.Figure 13-7 Four-Subnet FWLB Example NetworkN OTE – The port designations of both dirty-side Web switches are identical, as are the portdesignations of both clean-side Web switches. This simplifies configuration by allowing you tosynchronize each primary Web switch’s configuration with the secondary.Four-subnet FWLB configuration is summarized as follows: Configure routers and firewalls and test them for proper operation. Configure VLANs, IP interfaces, and static routes on all Web switches and test them. Configure secondary web switches with VRRP support settings. Configure FWLB groups and redirection filters on the primary dirty-side Web switch. Configure and synchronize VRRP on the primary dirty-side Web switch. Configure FWLB and SLB groups, and add FWLB redirection filters on the primaryclean-side Web switch. Configure VRRP on the primary clean-side Web switch and synchronize the secondary.These steps are explained in detail in the following sections.Subnet 1 (VLAN 1):195.1.1.0/24Subnet 2 (VLAN 2):10.10.2.0/24Subnet 3 (VLAN 3):10.10.3.0/24Subnet 4 (VLAN 4):10.10.4.0/24Dirty Side Clean SideInternet112299334499Router195.1.1.1Router195.1.1.2Firewall #1Dirty: 10.10.2.3Clean: 10.10.3.3Firewall #2Dirty: 10.10.2.4Clean: 10.10.3.410.10.4.2010.10.4.2110.10.4.22Web Switch #3IF1: 10.10.4.10IF2: 10.10.3.1IF3: 10.10.3.2/32VIP: 10.10.4.100Web Switch #4IF1: 10.10.4.11IF2: 10.10.3.11IF3: 10.10.3.12/32VIP: 10.10.4.100Web Switch #1IF1: 195.1.1.10IF2: 10.10.2.1IF3: 10.10.2.2/32Web Switch #2IF1: 195.1.1.11IF2: 10.10.2.11IF3: 10.10.2.12/32VIR195.1.1.9 VIR10.10.2.9 VIR10.10.3.9 VIR10.10.4.9
