Coyote Point Systems Equalizer Spezifikationen Seite 78

  • Herunterladen
  • Zu meinen Handbüchern hinzufügen
  • Drucken
  • Seite
    / 594
  • Inhaltsverzeichnis
  • FEHLERBEHEBUNG
  • LESEZEICHEN
  • Bewertet. / 5. Basierend auf Kundenbewertungen
Seitenansicht 77
Network Configuration
Networking Conventions
Several conventions are used within this section:
Network addresses are represented in Classless Inter-Domain Routing (CIDR) notation, an IP addressing
scheme in the form A.B.C.D/X where X is the number of bits in the subnet mask.
Subnets are referenced by the name of the VLAN which contains them, followed by the subnet name. For
example, internal:net means VLAN internal, subnet net.
All VLAN configurations presented are untagged. The configurations and concepts in this document applies
for tagged VLANs as well.
This section uses examples that are for IPv4 networking. However, the configuration for IPv6 networking
would be identical- with a couple of exceptions. These exceptions are identified - where applicable.
This section uses examples from an Equalizer OnDemand system using untagged VLANs. If your
configuration uses tagged networks or Equalizer physical appliances, the network interfaces displayed here
will not match your configuration. This is normal and remainder of the section still applies
Networking Technologies
There are several networking technologies described herein that apply to Equalizer installations. They are
summarized below, however, specific rules and commands will be described in more detail as each networking
scenario is described in further detail.
Destination Routing: This is standard routing, as performed by any networking device. The device determines how
to send a packet to its destination by evaluating the destination IP address. If that IP address is on a local network,
the device sends the packet directly using the Ethernet layer. If, however, that IP address is on a remote network,
the device consults its
routing table
to determine how to send it. The routing table consists of a set of entries in the
form:
IP/NETMASK || GATEWAY
The device searches the routing table in a
most specific
to
least specific
manner in order to find the most
appropriate route to use. For example, if one entry is for the network 10.0.0.0/8 and another is for the network
10.0.0.0/24, a packet destined for the IP address 10.0.0.1 would use the /24 entry because it is
more specific.
However, a packet destined for 10.0.1.1 would use the /8 entry because the /24 entry does not apply to this
destination. Once a matching route is found, the device sends the packet on to the gateway (or router) that is
specified in this route. It is then this gateway's job to get the packet closer to its final destination.
Source-Based Routing: This concept is not unique to Equalizer, however the behavior of each device that
implements Source-based Routing can be different. The definition of source-based routing is simply that the
source IP address is used in the routing decision
. For Equalizer, this means that rather than having a single
destination routing table, the system actually has a set of destination routing tables, each used only when the
source IP address of a packet matches a particular network. A source-based routing table contains entries in the
form:
(SOURCE IP/NETMASK,DESTINATION IP/NETMASK) || GATEWAY
78
Copyright © 2013 Coyote Point Systems. A subsidiary of Fortinet, Inc.
Seitenansicht 77
1 2 ... 73 74 75 76 77 78 79 80 81 82 83 ... 593 594

Kommentare zu diesen Handbüchern

Keine Kommentare