AX1000配置說明

1、AX配置說明1. 開始配置AX1000可以通過命令行和Web GUI兩種方式進(jìn)行配置。缺省用戶名/密碼：admin/a10根據(jù)需要修改一些系統(tǒng)配置，例如配置界面的超時時間等。配置時區(qū)命令行支持console, ssh 和Telnet 三種方式，輸入用戶名/密碼，進(jìn)入設(shè)備看到>后輸入enable， 密碼默認(rèn)為空默認(rèn)所有端口都是down的，如果要啟用端口，請參照以下命令操作：Interface ethernet n Enable或者直接在Web界面上啟用選中的端口。如果要通過數(shù)據(jù)端口管理設(shè)備，可采用如下命令：Enable-management service . 2. 網(wǎng)絡(luò)配置網(wǎng)絡(luò)部分配置推

2、薦使用命令行的方式。2.1. 劃分vlanQHD: vlan 2 untagged ethernet 1 to 2 router-interface ve 2!vlan 3 untagged ethernet 5 to 6 router-interface ve 3!FC：vlan 2 untagged ethernet 1 to 2 router-interface ve 2!vlan 3 untagged ethernet 5 to 6 router-interface ve 3!2.2. 配置IPQHD: interface ve 2!interface ve 3!FC：interfac

3、e ve 2!interface ve 3!2.3. 配置路由ip route （兩臺機器相同）2.4. 配置管理IP默認(rèn)管理IP是1，假設(shè)管理口IP要設(shè)置成其他地址，修改如下：interface management ip address *.*.*.*.* 255.*.*.* ip default-gateway *.*.*.*!3. 配置HAQHD: ha id 1ha group 1 priority 20ha interface ethernet 1 vlan 2ha interface ethernet 6 vlan 3ha check vlan 2 time

4、out 10!ha preemption-enablefloating-ip 32 ha-group 1floating-ip 52 ha-group 1!FC：ha id 2ha group 1 priority 10ha interface ethernet 1 vlan 2ha interface ethernet 6 ha check vlan 2 timeout 10!ha preemption-enablefloating-ip 32 ha-group 1floating-ip 52 ha-

5、group 1!4. 配置服務(wù)4.1. 配置模板4.1.1. 建立TCP長連接模板AX帶有默認(rèn)的模板，但是對于某些情況，需要創(chuàng)建相應(yīng)的模板進(jìn)行處理，例如對于Ftp等長連接，需要將連接過期時間改長，操作如下：在Web界面配置模式，選擇模板-L4-TCP->新建，如下設(shè)置命令行配置如下：slb template tcp tcp_template_long idle-timeout 600!4.1.2. 配置HTTP協(xié)議模板由于通過負(fù)載均衡設(shè)備訪問的源地址是經(jīng)過轉(zhuǎn)換了的，而服務(wù)器端要求能看到客戶端源地址，所以這里將創(chuàng)建一個模板，將源地址包含在HTTP的頭里面。slb template http

6、 http_template_for_clientip insert-client-ip compression minimum-content-length 120!4.1.3. 配置會話保持模板會話保持模板對于有多臺服務(wù)器做負(fù)載均衡的情況，如果用戶的業(yè)務(wù)，前后的會話是有關(guān)聯(lián)的，則一定要選中會話保持，操作如下：在Web界面配置模式，選擇模板-持續(xù)-源IP持續(xù)->新建命令行配置如下：slb template persist source-ip src_persistent timeout 10!4.2. 配置snatSnat 用于請求包從AX進(jìn)來，中間目的地址做過改變轉(zhuǎn)發(fā)給服務(wù)器，而服務(wù)

7、器卻從其他的路由不經(jīng)過AX將應(yīng)答包返回的現(xiàn)象，這種現(xiàn)象請求和應(yīng)答是不一致的，必須在AX上對源地址進(jìn)行轉(zhuǎn)換，保證請求和應(yīng)答都要經(jīng)過AX。在Web界面配置模式如下所示，選擇IP源NAT-IPv4池->新建命令行配置如下： netmask /29 ha-group-id 1 ip nat pool snat_to145 45 45 netmask /28 ha-group-id 1 ip nat pool snat_to146 46 46 netmask /28 ha-group-id 1 ip nat p

8、ool snat_to147 47 47 netmask /28 ha-group-id 1 ip nat pool snat_to148 48 48 netmask /28 ha-group-id 1 ip nat pool snat_to149 49 49 netmask /28 ha-group-id 1 !4.3. 配置服務(wù)器負(fù)載均衡以下僅為一個簡單的例子4.3.1. 配置服務(wù)器Web界面服務(wù)器服務(wù)器-選擇新建配置服務(wù)端口，在當(dāng)前頁面點擊端口-新建具體命令

9、行配置如下： port 0 tcp no health-check port 0 udp no health-check port 80 tcp port 443 tcp!slb server port 0 tcp no health-check port 0 udp no health-check port 80 tcp port 443 tcp! port 0 tcp no health-check port 0 udp no health-check port 80 tcp port 443 tcp! port 0 tcp no health-check port 0 udp no he

10、alth-check port 80 tcp port 443 tcp port 8080 tcp port 8443 tcp! port 0 tcp no health-check port 0 udp no health-check port 80 tcp port 7070 tcp port 7071 tcp port 20001 tcp port 20003 tcp port 8000 tcp port 8081 tcp port 8080 tcp port 20 tcp port 21 tcp port 1098 tcp port 1099 tcp port 4444 tcp por

11、t 4445 tcp port 4446 tcp port 8083 tcp! port 0 tcp no health-check port 0 udp no health-check port 8000 tcp! port 0 tcp no health-check port 0 udp no health-check port 80 tcp health-check http_test port 8081 tcp port 8080 tcp port 8082 tcp port 8083 tcp port 8084 tcp port 8085 tcp port 8086 tcp port

12、 8087 tcp port 8088 tcp port 8089 tcp port 8090 tcp port 8091 tcp port 8092 tcp port 8093 tcp port 8094 tcp port 8095 tcp port 8096 tcp port 8097 tcp port 8098 tcp port 8099 tcp! port 0 tcp no health-check port 0 udp no health-check port 80 tcp health-check http_test port 8081 tcp port 8080 tcp port

13、 8382 tcp port 8383 tcp port 8384 tcp port 8385 tcp port 8386 tcp port 8387 tcp port 8388 tcp port 8389 tcp port 8390 tcp port 8391 tcp port 8392 tcp port 8393 tcp port 8394 tcp port 8395 tcp port 8396 tcp port 8397 tcp port 8398 tcp port 8399 tcp port 8085 tcp! port 0 tcp no health-check port 0 udp

14、 no health-check port 80 tcp port 8080 tcp port 8081 tcp port 8082 tcp port 8083 tcp port 8084 tcp port 8085 tcp port 8086 tcp port 8087 tcp port 8088 tcp port 8089 tcp! port 0 tcp no health-check port 0 udp no health-check port 80 tcp port 8380 tcp port 8381 tcp port 8382 tcp port 8383 tcp port 838

15、4 tcp port 8385 tcp port 8386 tcp port 8387 tcp port 8388 tcp port 8389 tcp! port 0 tcp no health-check port 0 udp no health-check port 80 tcp port 20 tcp port 21 tcp port 1098 tcp port 1099 tcp port 4444 tcp port 4445 tcp port 4446 tcp port 8083 tcp port 7070 tcp port 7071 tcp port 20001 tcp port 2

16、0003 tcp port 8081 tcp port 8080 tcp!4.3.2. 配置服務(wù)組WEB界面-服務(wù)器-服務(wù)組-新建命令行配置如下：slb service-group sg_zf_apache_80 tcp member server_27:80 member server_29:80 member server_30:80!slb service-group sg_zf_apache_443 tcp member server_27:443 member server_

17、29:443 member server_30:443!slb service-group sg_zf_apache tcp member server_27:0 member server_29:0 member server_30:0!slb service-group sg_zf_apache_udp udp member server_27:0 member server_29:0 member server_30:0!slb ser

18、vice-group sg_zfht tcp member server_46:0 member server_26:0!slb service-group sg_zfht_udp udp member server_46:0 member server_26:0!slb service-group sg_zfht_80 tcp member server_46:80 member server_26:80!slb service-group sg_zfht

19、_7070 tcp member server_46:7070 member server_26:7070!slb service-group sg_zfht_7071 tcp member server_46:7071 member server_26:7071!slb service-group sg_zfht_20001 tcp member server_46:20001 member server_26:20001!slb service-grou

20、p sg_zfht_20003 tcp member server_46:20003 member server_26:20003!slb service-group sg_X3950-C_8000 tcp member server_47:8000!slb service-group sg_X3950-C tcp member server_47:0!slb service-group sg_X3950-C_udp udp member server_47:0!slb ser

21、vice-group sg_yygl_apache_80 tcp member server_61:80 member server_31:80!slb service-group sg_yygl_tomcat_8081 tcp member server_61:8081 member server_31:8081!slb service-group sg_yygl_apache tcp member server_61:0 member server_10.244.120.

22、131:0!slb service-group sg_yygl_apache_udp udp member server_61:0 member server_31:0!slb service-group sg_yygl_tomcat161 udp member server_61:0!slb service-group sg_yygl_tomcat161_udp tcp member server_61:0!slb service-group sg_yygl_tomcat161_8082 tcp

23、member server_61:8082!slb service-group sg_yygl_tomcat161_8083 tcp member server_61:8083!slb service-group sg_yygl_tomcat161_8084 tcp member server_61:8084!slb service-group sg_yygl_tomcat161_8085 tcp member server_61:8085!slb service-group sg_yygl_tom

24、cat161_8086 tcp member server_61:8086! slb service-group sg_yygl_tomcat161_8087 tcp member server_61:8087!slb service-group sg_yygl_tomcat161_8088 tcp member server_61:8088!slb service-group sg_yygl_tomcat161_8089 tcp member server_61:8089!slb service-

25、group sg_yygl_tomcat161_8090 tcp member server_61:8090!slb service-group sg_yygl_tomcat161_8091 tcp member server_61:8091!slb service-group sg_yygl_tomcat161_8092 tcp member server_61:8092!slb service-group sg_yygl_tomcat161_8093 tcp member server_61:8

26、093!slb service-group sg_yygl_tomcat161_8094 tcp member server_61:8094!slb service-group sg_yygl_tomcat161_8095 tcp member server_61:8095!slb service-group sg_yygl_tomcat161_8096 tcp member server_61:8096!slb service-group sg_yygl_tomcat161_8097 tcp member server_

27、61:8097!slb service-group sg_yygl_tomcat161_8098 tcp member server_61:8098!slb service-group sg_yygl_tomcat161_8099 tcp member server_61:8099!slb service-group sg_yygl_tomcat131 tcp member server_31:0!slb service-group sg_yygl_tomcat131_udp udp member

28、server_31:0!slb service-group sg_yygl_tomcat131_8382 tcp member server_31:8382!slb service-group sg_yygl_tomcat131_8383 tcp member server_31:8383!slb service-group sg_yygl_tomcat131_8384 tcp member server_31:8384!slb service-group sg_yygl_tomcat131_838

29、5 tcp member server_31:8385!slb service-group sg_yygl_tomcat131_8386 tcp member server_31:8386!slb service-group sg_yygl_tomcat131_8387 tcp member server_31:8387!slb service-group sg_yygl_tomcat131_8388 tcp member server_31:8388!slb service-group sg_yy

30、gl_tomcat131_8389 tcp member server_31:8389!slb service-group sg_yygl_tomcat131_8390 tcp member server_31:8390!slb service-group sg_yygl_tomcat131_8391 tcp member server_31:8391!slb service-group sg_yygl_tomcat131_8392 tcp member server_31:8392!slb ser

31、vice-group sg_yygl_tomcat131_8393 tcp member server_31:8393!slb service-group sg_yygl_tomcat131_8394 tcp member server_31:8394!slb service-group sg_yygl_tomcat131_8395 tcp member server_31:8395!slb service-group sg_yygl_tomcat131_8396 tcp member server_10.244.120.

32、131:8396!slb service-group sg_yygl_tomcat131_8397 tcp member server_31:8397!slb service-group sg_yygl_tomcat131_8398 tcp member server_31:8398!slb service-group sg_yygl_tomcat131_8399 tcp member server_31:8399!slb service-group sg_zz_apache_80 tcp member server_10

33、.244.19.178:80 member server_79:80!slb service-group sg_zz_apache tcp member server_78:0 member server_79:0!slb service-group sg_zz_apache_udp udp member server_78:0 member server_79:0!slb service-group sg_zz_tomcat178 tcp member server_10.244.1

34、9.178:0!slb service-group sg_zz_tomcat178_udp udp member server_78:0!slb service-group sg_zz_tomcat178_8080 tcp member server_78:8080!slb service-group sg_zz_tomcat178_8081 tcp member server_78:8081!slb service-group sg_zz_tomcat178_8082 tcp member server_

35、78:8082!slb service-group sg_zz_tomcat178_8083 tcp member server_78:8083!slb service-group sg_zz_tomcat178_8084 tcp member server_78:8084!slb service-group sg_zz_tomcat178_8085 tcp member server_78:8085!slb service-group sg_zz_tomcat178_8086 tcp member server_10.244.

36、19.178:8086!slb service-group sg_zz_tomcat178_8087 tcp member server_78:8087! slb service-group sg_zz_tomcat178_8088 tcp member server_78:8088!slb service-group sg_zz_tomcat178_8089 tcp member server_78:8089!slb service-group sg_zz_tomcat179 tcp member server_10.244.

37、19.179:0!slb service-group sg_zz_tomcat179_udp udp member server_79:0!slb service-group sg_zz_tomcat179_8380 tcp member server_79:8380!slb service-group sg_zz_tomcat179_8381 tcp member server_79:8381!slb service-group sg_zz_tomcat179_8382 tcp member server_10.244.19.

38、179:8382!slb service-group sg_zz_tomcat179_8383 tcp member server_79:8383!slb service-group sg_zz_tomcat179_8384 tcp member server_79:8384!slb service-group sg_zz_tomcat179_8385 tcp member server_79:8385!slb service-group sg_zz_tomcat179_8386 tcp member server_10.244

39、.19.179:8386!slb service-group sg_zz_tomcat179_8387 tcp member server_79:8387!slb service-group sg_zz_tomcat179_8388 tcp member server_79:8388!slb service-group sg_zz_tomcat179_8389 tcp member server_79:8389!slb service-group sg_zf_X3950-B tcp member server_10.244.12

40、0.146:0!slb service-group sg_zf_X3950-B_udp udp member server_46:0!slb service-group sg_zf_X3950-B_80 tcp member server_46:80!slb service-group sg_zf_X3950-B_7070 tcp member server_46:7070!slb service-group sg_zf_X3950-B_7071 tcp member server_46:7071!

41、slb service-group sg_zf_X3950-B_20001 tcp member server_46:20001!slb service-group sg_zf_X3950-B_20003 tcp member server_46:20003!slb service-group sg_zfht_8081 tcp member server_46:8081 member server_26:8081!slb service-group sg_zfht_8080 tcp member se

42、rver_46:8080 member server_26:8080!slb service-group sg_zfht_20 tcp member server_46:20 member server_26:20!slb service-group sg_zfht_21 tcp member server_46:21 member server_26:21!slb service-group sg_test_8085 tcp member server_1

43、61:8085 member server_31:8085!slb service-group sg_zfht_1098 tcp member server_46:1098 member server_26:1098!slb service-group sg_zfht_1099 tcp member server_46:1099 member server_26:1099!slb service-group sg_zfht_4444 tcp member s

44、erver_46:4444 member server_26:4444!slb service-group sg_zfht_4445 tcp member server_46:4445 member server_26:4445!slb service-group sg_zfht_4446 tcp member server_46:4446 member server_26:4446!slb service-group sg_zfht_8083 tcp me

45、mber server_46:8083 member server_26:8083!4.3.3. 配置虛擬服務(wù)器WEB界面-服務(wù)器-虛擬服務(wù)器-新建在當(dāng)前頁面點擊端口-新建具體內(nèi)容命令行配置如下： ha-group 1 port 0 tcp service-group sg_zf_apache conn-limit 1000000 template persist source-ip persist_src access-list 1 source-nat-pool snat_to148 port 0 udp service-group sg_zf

46、_apache_udp conn-limit 1000000 template persist source-ip persist_src access-list 1 source-nat-pool snat_to148 port 80 http service-group sg_zf_apache_80 template http http_template_for_clientip conn-limit 1000000 template persist source-ip persist_src access-list 1 source-nat-pool snat_to148 port 4

47、43 tcp source-nat pool snat_to148 service-group sg_zf_apache_443 conn-limit 1000000 template persist source-ip persist_src! ha-group 1 port 0 tcp service-group sg_zfht template persist source-ip persist_src access-list 1 source-nat-pool snat_to149 port 0 udp service-group sg_zfht_udp template persis

48、t source-ip persist_src access-list 1 source-nat-pool snat_to149 port 80 http service-group sg_zfht_80 template http http_template_for_clientip template persist source-ip persist_src access-list 1 source-nat-pool snat_to149 port 7070 http service-group sg_zfht_7070 template persist source-ip persist

49、_src access-list 1 source-nat-pool snat_to149 port 7071 tcp service-group sg_zfht_7071 template persist source-ip persist_src access-list 1 source-nat-pool snat_to149 port 20001 tcp service-group sg_zfht_20001 template persist source-ip persist_src access-list 1 source-nat-pool snat_to149 port 20003

50、 tcp service-group sg_zfht_20003 template persist source-ip persist_src access-list 1 source-nat-pool snat_to149 port 8081 http service-group sg_zfht_8081 template http http_template_for_clientip template persist source-ip persist_src access-list 1 source-nat-pool snat_to149 port 8080 http service-group sg_zfht_8080 template http http_template_for_clientip template persist source-ip persist_src access-list 1 source-nat-pool snat_to149 port 8083 http service-group sg_zfht_8083 template http http_temp