<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-CA link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Yes this would be the best , I have no issue with the duel nats
it only increases our security and allows us to fulfill security requirements .<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I have another LB running and am using the llb on that one and
have been for a few years.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Thanks for your info.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:
"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;
font-family:"Tahoma","sans-serif"'> Oliver Adam [mailto:oadam@madao.de] <br>
<b>Sent:</b> April-29-09 3:34 AM<br>
<b>To:</b> John McCabe [Ext. 363]; foundry-nsp@puck.nether.net<br>
<b>Subject:</b> Re: [f-nsp] (no subject)<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>FWLB relies heavily on FW-paths... I have never seen this
working with ServerIrons at one side only - I personally would not go for this.
I would go for LLB...<br>
<br>
This would imply you are going to do NAT twice... you do need two transfer
subnets in between the ServerIron (standalone) and the FWs. One subnet for each
FW. The ServerIron needs a physical IP per subnet and it needs a NAT IP per
subnet. Configure LLB similar to the config example in the documentation BUT
use the FWs as upstream routers instead of the ISP facing routers. The FWs need
to do NAT again towards the ISP(s). I would go for health check checking
something in front of the FWs - this helps to verify that the FW is up and
running and the device in front of the FW...<br>
<br>
Should be straight forward... <br>
<br>
R, Oliver<br>
<br>
<br>
At 21:57 28.04.2009, John McCabe [Ext. 363] wrote:<br>
<br>
<o:p></o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'>Content-Language: en-US<br>
Content-Type: multipart/alternative;<br>
boundary="_000_771397A62D34774DB13A1AE1E5A33C352477A16974exch2007Ridea_"<br>
<br>
I know what I would like, I know the diff between link load balance as FWLB.<br>
I want to balance all traffic going out of our network, i want to balance this
over out 2 10 meg links.<br>
<br>
Each link has its own firewall so i would like to link load balance, but before
the firewall, this may be the best way to do it,<br>
has anyone tried?<br>
I have multiple LB units I just don’t want to set up the whole meshed
system in the FWLB scenario. Seems overkill from where I am standing.<br>
<br>
<br>
<br>
<br>
john<o:p></o:p></p>
<div class=MsoNormal align=center style='text-align:center'>
<hr size=2 width="100%" align=center>
</div>
<p class=MsoNormal><span style='font-size:7.5pt;color:gray'>RIDEAU
CONFIDENTIALITY NOTICE<br>
This communication may contain privileged or confidential information. If you
are not the intended recipient or received this communication by error, please
notify the sender by reply email and delete the message without copying or
disclosing it.<br>
<br>
AVIS DE CONFIDENTIALITÉ DE RIDEAU<br>
Ce message peut contenir de l'information légalement privilégiée ou
confidentielle. Si vous n'êtes pas le destinataire ou croyez avoir reçu ce
message par erreur, nous vous saurions gré d'en aviser l'émetteur par courriel
et d'en détruire le contenu sans le communiquer à d'autres ou le reproduire.<br>
<br>
AVISO DE CONFIDENCIALIDAD DE RIDEAU<br>
Este mensaje puede contener información privilegiada o confidencial. Si usted
no es la persona a quien estaba dirigido el mensaje o si recibió este mensaje
por error, notifique a quien se lo envió por correo electrónico y elimine el
mensaje sin copiarlo o divulgarlo.<br>
</span>_______________________________________________<br>
foundry-nsp mailing list<br>
foundry-nsp@puck.nether.net<br>
<a href="http://puck.nether.net/mailman/listinfo/foundry-nsp">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>