네트워크

2022.02.11 18:55

ALTEON L4 스위치 설정하기

  • 비아웹 오래 전 2022.02.11 18:55 인기
  • 5,354
    0

- L4 IP : 192.168.88.150

S/N : 255.255.255.0 GW: 192.168.88.2

- VIP : 192.168.88.153

- Real IP : 192.168.88.132 ,192.168.88.133, 192.168.88.134

- PORT : 80 / 443 / 2222

ADMIN 패스워드 설정 (default : admin)

>> Main# /cfg/sys/access/user >> User Access Control# admpw Changing ADMINISTRATOR password; validation required: Enter current admin password:(기존Password) Enter newadministrator password:(변경할 Password) Re-enter newadministrator password:(변경할 Password) New administrator password accepted.

SNMP / TELNET 허용

>> Main# /cfg/sys/access >> System Access# snmp r >> System Access# tnet ena >> System Access# http ena <=WEB-UI 관리 필요할 경우

ACL 설정

>> Main# /cfg/sys/access/mgmt/add 10.10.10.10255.255.255.0 ssh * ssh, telnet, http, https, snmp or all

L4 스위치 IP 설정

>> Main# /cfg/l3/if1>>IP Interface 1# ena >>IP Interface 1# ipver v4 >>IP Interface 1# addr 192.168.88.150>>IP Interface 1# mask 255.255.255.0>>IP Interface 1# broad 192.168.88.255>>IP Interface 1# /cfg/l3/gw 1>> Default gateway 1# ena >> Default gateway 1# ipver v4 >> Default gateway 1# addr 192.168.88.2>> Default gateway 1# /cfg/slb >> Layer 4# on

Real IP 설정

>> Main# /cfg/slb/real 1>> Real Server 1 # ena >> Real Server 1 # ipver v4 >> Real Server 1 # rip 192.168.88.132>> Main# /cfg/slb/real 2>> Real Server 2 # ena >> Real Server 2 # ipver v4 >> Real Server 2 # rip 192.168.88.133>> Main# /cfg/slb/real 3>> Real Server 3 # ena >> Real Server 3 # ipver v4 >> Real Server 3 # rip 192.168.88.134

Group 설정

>> Main# /cfg/slb/group 1<= Port 80>> Real Server Group 1# ipver v4 >> Real Server Group 1# add 1<= Real IP1(192.168.88.132)>> Real Server Group 1# add 2<= Real IP2(192.168.88.133)>> Real Server Group 1# add 3<= Real IP3(192.168.88.134)>> Main# /cfg/slb/group 2<= Port 443>> Real Server Group 2# ipver v4 >> Real Server Group 2# add 1>> Real Server Group 2# add 2>> Real Server Group 2# add 3>> Main# /cfg/slb/group 3<= Port 2222>> Real Server Group 3# ipver v4 >> Real Server Group 3# add 1>> Real Server Group 3# add 2>> Real Server Group 3# add 3

Virtual IP & Group 포트 지정

>> Main# /cfg/slb/virt 1>> Virtual Server 1# ena >> Virtual Server 1# ipver v4 >> Virtual Server 1# vip 192.168.88.153>>/c/slb/virt 1/service http group 1>>/c/slb/virt 1/service https group 2>>/c/slb/virt 1/service 2222 group 3
# L4 스위치 포트 오픈 >> Main# /cfg/slb/port 1>>SLB Port 1# server ena >> Main# /cfg/slb/port 2>>SLB Port 2# server ena ::>> Main# /cfg/slb/port 8 외부에서 들어오는 포트는 Client Enable >>SLB Port 8# client ena
* 적용 >> Main# apply * 저장 >> Main# save * 적용 / 저장 >> Main# apply / save
MAC 주소 확인 >> Main# /info/l3/arp/------------------------------------------------------------[Address Resolution Protocol Menu] find - Show a single ARP entry by IP address port - Show ARP entries on a single port vlan - Show ARP entries on a single VLAN refpt - Show ARP entries referenced by a single SP dump - Show all ARP entries help - Show help on the fields ofARP entries addr - Show ARP address list >> Address Resolution Protocol# dump IP address Flags MAC address VLAN Port Referenced SPs ---------------------------------------------------------------192.168.88.100:00:00:00:00:00181-4192.168.88.150P00:00:00:00:00:0011-4192.168.88.13200:00:00:00:00:01111-4192.168.88.13300:00:00:00:00:02121-4192.168.88.13400:00:00:00:00:03121-4
Direct 옵션(default는 disabled : RealIP를 통한 직접 서비스 불가)>> Main# /cfg/slb/adv >> Layer 4 Advanced# direct ena IDLE-set time for idle cli sessions(CLI 모드 시간 설정)(default5minutes)>> Main# /cfg/sys>> System# idle 10 매니지먼트포트 사용 시 IP>> Main# /cfg/sys/mmgmt >> Management Port# addr x.x.x.x >> Management Port# mask x.x.x.x >> Management Port# broad x.x.x.255>> Management Port# gw x.x.x.x SLB 동작 확인 >> Main# /info/slb/dump 전체 설정 확인 >> Main# /cfg/dump Timezone 설정 >> Main# /cfg/sys/timezone Please identify a location so that time zone rules can be set correctly. Please select a continent or ocean.1) Africa 2) Americas 3) Antarctica 4) Arctic Ocean 5) Asia 6) Atlantic Ocean 7) Australia 8) Europe 9) Indian Ocean 10) Pacific Ocean 11) None - disable timezone setting Enter the number of your choice:5 Please select a country.1) Afghanistan 18) Israel 35) Palestine 2) Armenia 19) Japan 36) Philippines 3) Azerbaijan 20) Jordan 37) Qatar 4) Bahrain 21) Kazakhstan 38) Russia 5) Bangladesh 22)Korea(North)39) Saudi Arabia 6) Bhutan 23)Korea(South)40) Singapore 7) Brunei 24) Kuwait 41) Sri Lanka 8) Cambodia 25) Kyrgyzstan 42) Syria 9) China 26) Laos 43) Taiwan 10) Cyprus 27) Lebanon 44) Tajikistan 11) East Timor 28) Macau 45) Thailand 12) Georgia 29) Malaysia 46) Turkmenistan 13) Hong Kong 30) Mongolia 47) United Arab Emirates 14) India 31)Myanmar(Burma)48) Uzbekistan 15) Indonesia 32) Nepal 49) Vietnam 16) Iran 33) Oman 50) Yemen 17) Iraq 34) Pakistan Enter the number of your choice:23NTP 서버 설정 >> Main# /cfg/sys/ntp/>>NTP Server# on >>NTP Server# prisrv <NTP 서버 IP>

감사합니다.

서버호스팅 비아웹

  • 공유링크 복사
  • 이전글Fortigate 명령어2022.02.11
  • 댓글목록

    등록된 댓글이 없습니다.