Chapter 11
Configuring Firewall Load Balancing
Figure 11-3 Regular Firewall Configuration (Single CSM)
Internet
In
Figure
directions. The figure shows the flow from the Internet to the intranet. VLANs 5, 6, and 7 are shared
between CSM A and CSM B. On the path to the intranet, CSM A balances traffic across VLANs 5, 6,
and 7 through firewalls to CSM B. On the path to the intranet, CSM B balances traffic across VLANs 5,
6, and 7 through firewalls to CSM A.
OL-4612-01
Catalyst 6500
IP address
25.0.11.20
VLAN 11
IP address
25.0.11.10
25.0.11.20
CSM
IP address
25.0.12.20
IP address
25.0.12.20
11-4, traffic moves through both the regular and stealth firewalls and is filtered in both
IP address
25.0.11.50
VLAN 111
IP address
25.0.11.10
25.0.11.51
IP address
25.0.11.52
VLAN 112
25.0.12.10
VLAN 12
IP address
25.0.12.10
25.0.12.21
Catalyst 6500 Series Content Switching Module Configuration Note
Understanding How Firewalls Work
IP address
25.0.12.50
IP address
25.0.12.51
IP address
25.0.12.52
Firewalls
IP address
Intranet
25.0.21.1
Router
11-5