Question on how does load balancing work on Firewall Services Module (FWSM)

[snakayama]

Hi everyone,

I have a question about the algorithm of load balancing on Firewall Services Module (FWSM).

I understand that the FWSM supports up to three equal cost routes on the same interface for load balancing.

Please see a lower simple figure.

outside inside

--- L3 SW --+

|

MHSRP +--- FWSM ----

|

--- L3 SW --+

I am going to configure the following default routes on FWSM point to each MHSRP VIP (192.168.13.29 and 192.168.13.30) for load balancing.

route outside_1 0.0.0.0 0.0.0.0 192.168.13.29 1

route outside_1 0.0.0.0 0.0.0.0 192.168.13.30 1　　　　　　

However I don't know how load balancing work on FWSM.

On FWSM, load balancing work based on

Per-Destination ?

Per-Source ?

Per-Packet ?

or

Other criteria ?

Your information would be greatly appreciated.

Best Regards,

[wong34539]

Configuring "tunnel default gateway' on the concentrator allowed traffic to flow as desired through the FWSM.

FWSM is not capable of performing policy based routing, the additional static routes for the VPN load balancing caused half of the packets to be lost. As a result, it appears that the VPN concentrators will not be able to load balance.