Avaya P333R-LB Manuel D’Utilisation

Page de 218
Chapter 14
Load Balancing in the P333R-LB
2
Avaya 
P333R-LB User’s Guide
of failure.
P333R-LB supports both bridging and two types of routing firewalls: transparent 
and non-transparent.
Transparent Routing Firewall Load Balancing
This section explains how the P333R-LB supports Transparent Routing FWLB, and 
includes configuration examples.
Implementation
For Transparent Routing FWLB, the load balancer receives a packet, makes a load 
balancing decision, and forwards the packet to a firewall. The firewall does not 
perform Network Address Translation (NAT) on the packets; the source and 
destination IP addresses are not changed. 
Two P333R-LBs are required for Transparent Routing FWLB, one on each side of the 
firewalls. One device intercepts traffic between the protected zone and the firewall, 
and the second device intercepts traffic between the unprotected zone and the 
firewall.
Transparent Routing firewalls act as "next hop" devices from the perspective of the 
P333R-LB. After one of the firewalls in a group is selected, normal routing to that 
firewall takes place.
The P333R-LB performs an “intelligent routing” decision, based on the Load 
Balancing criteria, and replaces the MAC address in the packets by the MAC 
address of the selected firewall.
P333R-LB enables you to route packets destined to a Demilitarized Zone (DMZ). A 
DMZ is a portion of the client’s network, apart from the client’s LAN, where remote 
access is allowed. After creating a DMZ, a third load balancer is installed, which 
routes packets to the DMZ.