CSS 11500 - how does Firewall loadbalancing works

[sthon-dbsys]

Hi,

can someone explain me, how firewall loadbalancing exactly works ?

1. how is the algorithm to choose which FW is used (src address, destination address or ports) ?

2. how can I troubleshoot or view an active firewall loadbalanced flow ?

Is there a kind of sticky table which I can view ?

3. Are there some documents, which describe the fw loadbalancing issue ?

thanks in advance

[hdecreis]

Hello,

1. The CSS uses the source and destination IP addresses in the algorithm to calculate which firewall to use for each flow.

2. show flow srcip dstip allows you to see which flow goes on which firewall.

3. basic description here: http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_configuration_guide_chapter09186a0080157803.html

[sthon-dbsys]

thanks for the info.

But if I use the "show flow srcip dstip" I see only the src and destination IP Address in the flow, not which FW is used :-(

Any other ideas ?