ServerView Resource Orchestrator Cloud Edition V3.1.0 Design Guide

G.3.7 For deploying firewall and server load balancer(for combination of ASA5500 series and BIG-IP LTM series)

The default model configuration assumed by a sample script is given below:

Figure G.6 Default Model Configuration for a Sample Script(firewall and server load balancer: ASA5500 series and BIG-IP LTM series)

When the combination of ASA5500 series and BIG-IP LTM series are used as firewall and server load balancer for tier models in the system, firewall rulesets are used together with server load balancer rulesets.

Listed below are sample ruleset names provided by Resource Orchestrator:

For deploying BIG-IP LTM series as server load balancers

SLB_with_SSL-ACC--BIGIP1

For the systems that use BIG-IP LTM series for server load balancers(using SSL accelerator).

LAN Ports to be Used

• For Public LANs and Unit Synchronization

  mytrunk: Connection using Link aggregation

  • 1.1

  • 1.2

• For the Admin LAN

  mgmt

SLB_without_SSL-ACC--BIGIP1

For the systems that use BIG-IP LTM series for server load balancers(without SSL accelerator).

LAN Ports to be Used

• For Public LANs and Unit Synchronization

  mytrunk: Connection using Link aggregation

  • 1.1

  • 1.2

• For the Admin LAN

  mgmt

  
  

For deploying ASA5500 series(for ASA5500) as firewalls

FW_of_3Tier_sys_inc_SLB--ASA1

For the systems that use ASA5510 as an ASA5500 series model for three-tier models

LAN Ports to be Used

• For Public LANs (Center Switch Side)

  ethernet0/0

• For Public LANs (L2 Switch Side)

  redundant1: Redundant LAN Channels

  • ethernet0/1

  • ethernet0/2

• For the Admin LAN

  management0/0

• For Unit Synchronization

  ethernet0/3

FW_of_3Tier_sys_inc_SLB--ASA2

For the systems that use ASA5520/5540/5550 as an ASA5500 series model for three-tier models

LAN Ports to be Used

• For Public LANs (Center Switch Side)

  gigabitethernet0/0

• For Public LANs (L2 Switch Side)

  redundant1: Redundant LAN Channels

  • gigabitethernet0/1

  • gigabitethernet0/2

• For the Admin LAN

  management0/0

• For Unit Synchronization

  gigabitethernet0/3

FW_of_3Tier_sys_inc_SLB--ASA3

For the systems that use ASA5580 as an ASA5500 series model for three-tier models

LAN Ports to be Used

• For Public LANs (Center Switch Side)

  gigabitethernet3/0

• For Public LANs (L2 Switch Side)

  redundant1: Redundant LAN Channels

  • gigabitethernet3/1

  • gigabitethernet3/2

• For the Admin LAN

  management0/0

• For Unit Synchronization

  gigabitethernet3/3