FAQ（ECL2.0）

Firewall (Brocade 5600 vRouter) - FAQ

• All(57)
• Operation(20)
• Specification(23)
• Construction(18)

• Let me know the priority (master/backup) when I register VRRP on Firewall(Brocade 5600 vRouter).ECL2.0, Firewall (Brocade 5600 vRouter)

  The priority is basically decided depending on "priority" value configured in each Firewall. When both Firewalls have the same "priority" value, it is decided depending on big and small of IP address of the interface.

  Is this page helpful?

  Yes No

  Open in a new window
• How to edit the default gateway of Firewall (Brocade 5600 vRouter)?ECL2.0, Firewall (Brocade 5600 vRouter)

  You can edit the default gateway of Firewall (Brocade 5600 vRouter) via Portal/API provided by ECL2.0. You cannot do it via Portal/API/CLI provided by Brocade 5600 vRouter.

  Tutorials - Firewall (Brocade 5600 vRouter) - Firewall Instance Operation Method

  API References - Firewall

  Is this page helpful?

  Yes No

  Open in a new window
• Let me know the order in which the filter rules are executed on Firewall (Brocade 5600 vRouter).ECL2.0, Firewall (Brocade 5600 vRouter)

  When you set multiple filter rules on Firewall (Brocade 5600 vRouter), the rules are executed in numeric sequence, according to the rule number, from lowest to highest.

  Reference: Brocade 5600 vRouter Userguide
  Brocade 5600 vRouter Firewall Configuration Guide - Firewall rules

  (Excerpt)
  Rules are executed in numeric sequence, according to the rule number, from lowest to highest. If the traffic matches the characteristics specified by a rule, the action of the rule is executed; if not, the system “falls through” to the next rule.

  Is this page helpful?

  Yes No

  Open in a new window
• What should I do when I found the operation that cannot be performed by user-admin account in Brocade 5600 vRouter?ECL2.0, Firewall (Brocade 5600 vRouter)

  Please ask us via Ticket System.

  Is this page helpful?

  Yes No

  Open in a new window
• How to build a configuration of Firewall (Brocade 5600 vRouter) that uses only one global IP?ECL2.0, Firewall (Brocade 5600 vRouter)

  Since the Internet gateway is redundant with VRRP, you need to assign three IP addresses.

  If you use only one global IP, the following settings are required.
  1.  Build the logical network with private IP address
  2. Connect the Internet gateway to the logical network created in 1
  3. Connect the firewall or VM to the logical network created in 1, and configure NAT so that the connection to /32 global IP can be translated.
  4. Set up the Internet gateway; a static route with /32 global IP as the destination, the firewall or VM created in 3 and VM as the next hop

  Service Descriptions - Internet Connectivity - Description of Functions

  * More specific setting methods are outside our support range.

  Is this page helpful?

  Yes No

  Open in a new window
• Please tell me the version difference of Firewall(Brocade 5600 vRouter).ECL2.0, Firewall (Brocade 5600 vRouter)

  Version differences are described in below documents.

  Service Descriptions - Firewall(Brocade 5600 vRouter) - Firewall Function

  Is this page helpful?

  Yes No

  Open in a new window
• What kind of menu is Firewall(Brocade 5600 vRouter)?ECL2.0, Firewall (Brocade 5600 vRouter)

  We will install and provide Firewall(Brocade 5600 vRouter) on customer's own virtual server housed in shared physical server. Create/delete Firewall(Brocade 5600 vRouter) is automated, so you can use it as much as you like at any time.
  Most of the Brocade 5600 vRouter's configuration authority are open to the customer, and flexible settings are available.
  Please refer to below documents for details on this menu.

  Service Descriptions - Firewall(Brocade 5600 vRouter)

  Is this page helpful?

  Yes No

  Open in a new window
• How can I increase the number of concurrent TCP connections on Firewall(Brocade 5600 vRouter)?ECL2.0, Firewall (Brocade 5600 vRouter)

  Please refer to our performance measurement results as published to the tutorial.
  The maximum number of concurrent TCP connections is set for each instance and, even if multiple interfaces and IP addresses are used, the upper limit value does not change.
  Although it is possible to raise the upper limit by purchasing multiple instances, it does not guarantee performance because this menu is a shared service.
  If you want to guarantee the performance, please use occupied type service such as bare metal server.

  Tutorials - Firewall(Brocade 5600 vRouter) - (Reference) Firewall performance measurement result

  Is this page helpful?

  Yes No

  Open in a new window
• Please tell me about time synchronization setting for Firewall(Brocade 5600 vRouter).ECL2.0, Firewall (Brocade 5600 vRouter)

  The time of Firewall(Brocade 5600 vRouter) is synchronized with ECL2.0 infrastructure and no time lag occurs on it. You can also prepare NTP server for your own.

  Is this page helpful?

  Yes No

  Open in a new window
• Please tell me the performance value of Firewall(Brocade 5600 vRouter).ECL2.0, Firewall (Brocade 5600 vRouter)

  Please kindly refer to below Tutorials for the details of the performance value of Firewall(Brocade 5600 vRouter).

  Tutorials - Firewall(Brocade 5600 vRouter) - (Reference) Firewall performance measurement result

  Is this page helpful?

  Yes No

  Open in a new window