目的负载均衡

FortiADC服务器负载均衡(SLB)NAT46和NAT64版本1.
0时间2015年10月支持的版本FortiADCv4.
3.
x作者刘康明状态已审核反馈support_cn@fortinet.
comFortinet公司第2页/共9页www.
fortinet.
com.
cn目录简介.
3Layer4NAT46配置举例.
3Layer4NAT64配置举例.
5Layer7NAT46配置举例.
7Layer7NAT64配置举例.
8Fortinet公司第3页/共9页www.
fortinet.
com.
cn简介在FortiADC服务器负载均衡(SLB)的实际应用中,时常遇到IPv4和IPv6双栈型组网,需要将IPv4地址和IPv6地址相互进行转换,实现负载调度的同时解决IPv4和IPv6互联互通,FortiADCSLB提供L4/L7的NAT46/NAT64转换,本文将针对这四种转换分别进行配置举例说明.
Layer4NAT46配置举例1.
组网拓扑2.
拓扑说明入方向IPv4网络源地址192.
168.
1.
1ClientIP目的地址192.
168.
1.
101VSIPFortinet公司第4页/共9页www.
fortinet.
com.
cn出方向IPv6网络源地址2002::2:101IPPoolIPv6目的地址2002::2:1RealServerIPv63.
配置详情Realserverconfigload-balancepooledit"pool6"setaddr-typeipv6configpool_memberedit1setip62002::2:1nextedit2……NextIppool(L4的NAT46/NAT64转换需要Ippool)configload-balanceippooledit"ippool6"setaddr-typeipv6setinterfaceport2setip6-min2002::2:101setip6-max2002::2:104confignode-memberendnextvirtual-serverconfigload-balancevirtual-serveredit"l4-nat46"setpacket-forwarding-methodNAT46setinterfaceport3setip192.
168.
1.
101setload-balance-profiletcp/udpsetload-balance-methodRoundRobinsetload-balance-poolpool6(调用RealServer)setippoolippool6……NextFortinet公司第5页/共9页www.
fortinet.
com.
cnLayer4NAT64配置举例1.
组网拓扑2.
拓扑说明入方向IPv6网络源地址2001::1:1ClientIPv6目的地址2001::1:101VSIPv6出方向IPv4网络源地址192.
168.
2.
101IPPoolIP目的地址192.
168.
2.
1RealServerIP3.
配置详情Realserverconfigload-balancepooledit"pool4"configpool_memberedit1setip192.
168.
2.
1Fortinet公司第6页/共9页www.
fortinet.
com.
cnnextedit3……NextIppool(L4的NAT46/NAT64转换需要Ippool)configload-balanceippooledit"ippool4"setinterfaceport2setip-min192.
168.
2.
101setip-max192.
168.
2.
104confignode-memberendnextvirtual-serverconfigload-balancevirtual-serveredit"l4-nat64"setpacket-forwarding-methodNAT64setinterfaceport3setaddr-typeipv6setip62001::1:101setload-balance-profiletcp/udpsetload-balance-methodRoundRobinsetload-balance-poolpool4(调用RealServer)setippoolippoo4nextFortinet公司第7页/共9页www.
fortinet.
com.
cnLayer7NAT46配置举例1.
组网拓扑2.
拓扑说明入方向IPv4网络源地址192.
168.
1.
1ClientIP目的地址192.
168.
1.
101VSIP出方向IPv6网络源地址2002::2:101Egress_interface_IPv6目的地址2002::2:1RealServerIPv63.
配置详情Realserverconfigload-balancepooledit"pool6"setaddr-typeipv6configpool_memberedit1Fortinet公司第8页/共9页www.
fortinet.
com.
cnsetip62002::2:1nextedit2……Nextvirtual-serverconfigload-balancevirtual-serveredit"l7-nat46"settypel7-load-balancesetinterfaceport3setip192.
168.
1.
101setload-balance-profilehttp/https/tcpssetload-balance-methodRoundRobin/LeastConnection/FastestResponsesetload-balance-poolpool6(调用RealServer)……NextLayer7NAT64配置举例1.
组网拓扑Fortinet公司第9页/共9页www.
fortinet.
com.
cn2.
拓扑说明入方向IPv6网络源地址2001::1:1ClientIPv6目的地址2001::1:101VSIPv6出方向IPv4网络源地址192.
168.
2.
101EgressinterfaceIP目的地址192.
168.
2.
1RealServerIP3.
配置详情Realserverconfigload-balancepooledit"pool4"configpool_memberedit1setip192.
168.
2.
1nextedit3……Nextvirtual-serverconfigload-balancevirtual-serveredit"l7-nat64"settypel7-load-balancesetinterfaceport3setaddr-typeipv6setip62001::1:101setload-balance-profilehttp/https/tcpssetload-balance-method……setload-balance-poolpool4(调用RealServer)……next