RE: [FW1] Load Balance or Fail Over question...

[Tim Cullen]

 

-----Original Message-----
From: Edward Kuhner [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 19, 2001 9:26 AM
To: [EMAIL PROTECTED]
Subject: [FW1] Load Balance or Fail Over question...

Hello All...

 

We currently have a Nokia IP440, and we are purchasing a second one.

 

I am not sure what I need for the second, and what I need to change/configure in order to make these work for us.

 

I would like to balance the load across these, and our routers on each side support firewall load balancing, but I was also told that I might need to do some other things.

 

Do I need to setup the management console on another server?[Tim Cullen] Yes   I have a few NT servers I could put it onto...  would that work?[Tim Cullen] Yes 

 

Also, how do I handle IP addressing with the load balanced firewalls?[Tim Cullen] Ip addressing is a little tricky.  It will not matter if you use VRRP or a third party solution, you will need a shared IP for the Cluster address for all interfaces being load balanced.

For example:

 

                           FW1                                  FW2

                        10.1.1.1                             10.1.1.3

                         Real IP                               Real IP

                                 \                                /    

                                   \                             / 

                                     \                          /                                           

                                           FW Cluster 

                                        (virtual address)

                                             10.1.1.2

 

If anyone has any info that could help me out, I would really appreciate it!

 

Visio drawing would be really nice as well!
 

Thanks in advance!

Edward Kuhner
PowerIT-Up, Inc.
[EMAIL PROTECTED]
www.powerit-up.com
713-339-3115
fax 713-952-9943