Virtual server and client command

[m.baker]

Hi,

I want to configure firewall load balancing as follows. I have 3 firewalls, FW1, FW2, FW3. I want to create a serverfarm for each FW, i.e. FW1 in SF1, FW2 in SF2, and FW3 in SF3. Then, we'd like to create two Virtual server VS1 and VS2. Each Virtual server has Server Farm SF2 as a backup server farm. I.e. SF1 is the active server farm for VS1, and SF2 is the backup server farm for VS1. We also have SF3 is the active server farm for VS2, and SF2 is the backup server farm for VS3. Note that all connections to VS1 and VS2 will come from the same VLAN (e.g. VLAN X). So the configuration of the virtual server I think should be as follows ;

vserver VS1

virtual 0.0.0.0 0.0.0.0 25

client 192.168.1.0 255.255.255.0

!

vserver VS2

virtual 0.0.0.0 0.0.0.0 25

client 192.168.2.0 255.255.255.0

So, the question I have is, will this work if we filter who can access the virtual server using the client commmand ? I.e. clients coming from 192.168.1.0 will be using VS1 and clients coming from 192.168.2.0 will be using VS2.

Thanks !

[seilsz]

The 'client' command should work as you expect.

You'll need to add the 'serverfarm' command under each vserver. Ex:

serverfarm SF1

real 1.1.1.1

serverfarm SF2

real 2.2.2.2

serverfarm SF3

real 3.3.3.3

vserver VS1

virtual 0.0.0.0 0.0.0.0 tcp 25

serverfarm SF1 backup SF2

client 192.168.1.0 255.255.255.0

vserver VS2

virtual 0.0.0.0 0.0.0.0 tcp 25

serverfarm SF3 backup SF2

client 192.168.2.0 255.255.255.0

I am assuming that you will be using different IP addresses for each vserver. Is that correct?

~Zach

[m.baker]

yes. I will. Thanks.