16.1.0/24) to the downstream
router (10.1.1.2) that is connected to the inside interface, and for Network B (192.168.1.0/24) to the
downstream router (10.1.2.2) connected to the DMZ interface.
Figure 6-8. Configuring a Static and Default Route
[View full size image]
Equal Cost Multiple Path (ECMP) Forwarding
For load balancing, the Security Appliance offers the ECMP that supports up to three equal-cost routes to the
same destination per interface. Based on an algorithm that hashes the source and destination IP addresses, the
Security Appliance load balances the traffic among the specified gateways. Note that this does not guarantee
diverting traffic equally among the gateways.
Example 6-6 shows three equal-cost static routes for destination network 10.1.1.0/24, forwarding traffic to
three different gateways on the outside interface.
Example 6-6. Configuring ECMP (Equal Cost Multiple Path) Static Routes
hostname(config)# route outside 10.1.1.0 255.255.255.0 209.165.201.1
hostname(config)# route outside 10.1.1.0 255.255.255.0 209.165.201.2
hostname(config)# route outside 10.1.1.0 255.255.255.0 209.165.201.3
Similarly, up to three equal-cost default routes can be defined per device.
Pages:
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282