Amer-networks E5Web GUI Manual do Utilizador descarregar pdf (Página 284)

100

101

Internet access is available from either one of two ISPs, whose gateways GW1 GW2 are connected

to the security gateway interfaces WAN1 and WAN2. RLB will be used to balance the

connections between the two ISPs.

Figure 4.7. A Route Load Balancing Scenario

We first need to define two routes to these two ISPs in the main routing table as shown below:

Route No. Interface Destination Gateway Metric

1 WAN1 all-nets GW1 100

2 WAN2 all-nets GW2 100

We will not use the spillover algorithm in this example so the routing metric for both routes

should be the same, in this case a value of 100 is selected.

By using the Destination RLB algorithm we can ensure that clients communicate with a particular

server using the same route and therefore the same source IP address. If NAT was being used for

the client communication, the IP address seen by the server would be WAN1 or WAN2.

In order to flow, any traffic requires both a route and an allowing IP rule. The following rules will

allow traffic to flow to either ISP and will NAT the traffic using the external IP addresses of

interfaces WAN1 and WAN2.

Rule No. Action Src Interface Src Network Dest Interface Dest Network Service

1 NAT lan lan_net WAN1 all-nets all_services

1 NAT lan lan_net WAN2 all-nets all_services

The service All is used in the above IP rules but this should be further refined to a service or

service group that covers all the traffic that will be allowed to flow.

Chapter 4: Routing

284

1 2 ... 279 280 281 282 283 284 285 286 287 288 289 ... 776 777

Comentários a estes Manuais

Sem comentários

Amer-networks E5Web GUI Manual do Utilizador Página 284

Comentários a estes Manuais

Manuais e produtos relacionados com Acessórios para Computador Amer-networks E5Web GUI