Application Description

(1)

1 / 13

Application

Description

• Firewall in front of LAN

• Different Servers located

behind Firewall

• Firewall to be accessible

from Internet

• Load Balancer to be

installed in a TRANSPARENT

MODE between Firewall and

Internet routers

• Traffic to the Firewall to

be received thru both

(2)

Network

Diagram

Peer IP = Public IP entered to do constant pings to and determine that live is “alive” beyond the Internet router

(3)

(4)

Mapping Table

Citrix Server

WAN2

Traffic arrives directly to Citrix on WAN1 thru 100.1.1.30 on a transparent mode.

(5)

5 / 13

Programming of the Load Balancer

It is done in 4 steps:

STEP 1 – Configuration of WAN Interfaces (slide 6-8)

We will enter the IP addresses of WAN, Peer IPs, Secondary WAN IPs, bandwidth values and

enable Proxy ARP.

STEP 2 – Setup LAN Interface (slide 9)

We will enter the IP address for LAN in the same segment as the WAN and enable Proxy ARP.

STEP 3 – Setup Host in the LAN/Firewall (slide 10)

We will enter host located behind the Firewall as IP addresses in the LAN side of the balancer.

At this point, and due to the transparent mode, the Firewall can be reached from the Internet with the

public IP addresses.

STEP 4 – Setup DNAT Rules (slides 11-12)

(6)

(7)

7 / 13

We enable Proxy-ARP to keep for Transparent Mode (need to be done both in WAN and LAN)

(8)

We need to define finally the SECONDARY IP addresses that will reside on the WAN ports. We WILL NOT INCLUDE the IP addresses that will be assigned to the Firewall WAN port or Internet routers, only those IP addresses that will be located at the WAN ports.

(9)

9 / 13

Under Configuration Interface LAN: we would enter the LAN IP address in the same segment as the WAN IPs and

(10)

(11)

11 / 13

Finally we need to include Destination NAT Rules under Configuration NAT. These rules will redirect the traffic

(12)

(13)