Chapter 11
Configuring Firewall Load Balancing
Figure 11-5 Fault-Tolerant, Regular Firewall Configuration–(Dual CSMs)
Internet
Catalyst 6500
CSM-A
primary
IP address
25.0.11.21
IP address
25.0.11.21
VLAN 9
VLAN 11
25.0.11.20
CSM to CSM
Catalyst 6000
CSM-A
secondary
IP address
25.0.11.22
IP address
25.0.11.22
Configuring Stealth Firewall Load Balancing
This section describes how to configure firewall load balancing for stealth firewalls and covers the
following information:
•
•
Stealth Firewall Configuration
In a stealth firewall configuration, firewalls connect to two different VLANs and are configured with IP
addresses on the VLANs to which they connect. (See
OL-4612-01
Regular Firewalls
IP address
25.0.11.50
VLAN 111
IP address
25.0.11.20
25.0.11.51
IP address
25.0.11.52
Stealth Firewall Configuration, page 11-7
Stealth Firewall Configuration Example, page 11-8
Catalyst 6500
CSM-B
IP address
IP address
25.0.12.21
25.0.12.50
VLAN 112
IP address
25.0.12.20
CSM to CSM
25.0.12.51
Catalyst 6000
IP address
25.0.12.52
CSM-A
secondary
IP address
25.0.12.22
Figure
11-6.)
Catalyst 6500 Series Content Switching Module Configuration Note
Configuring Stealth Firewall Load Balancing
Intranet
IP address
25.0.13.1
Router
IP address
25.0.12.1
IP address
20.0.12.21
VLAN 12
VLAN 9
25.0.12.20
IP address
25.0.12.22
11-7