All rights reserved. Use of this product and this manual is subject to license. Information in this
document is subject to change without notice.
Trademarks
Barracuda Link Balancer is a trademark of Barracuda Networks. All other brand and product names mentioned in this document are registered
trademarks or trademarks of their respective holders.
Step 14. Include All Clients (Replace Your Firewall) . . . . . . . . . . . . . . . . . . . . . 16
Side by Side with Your Firewall Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Step 1. Preparing for Installation (Side by Side with Your Firewall). . . . . . . . . . . . . . 17
Step 2. Physically Connect to the Barracuda Link Balancer (Side by Side with Your Firewall)17
Step 3. Configure LAN IP Address and Network Settings (Side by Side with Your Firewall) . 17
Step 4. Log into the Barracuda Link Balancer Web Interface (Side by Side with Your Firewall)18
Step 5. Configure the WAN Links (Side by Side with Your Firewall) . . . . . . . . . . . . . 18
Step 6. Permanently Install the Barracuda Link Balancer (Side by Side with Your Firewall) . 18
Step 7. Test Connectivity (Side by Side with Your Firewall). . . . . . . . . . . . . . . . . . 19
Step 8. Activate Subscription (Side by Side with Your Firewall) . . . . . . . . . . . . . . . 19
Step 9. Change the Administrator Password (Side by Side with Your Firewall) . . . . . . . 19
Features of the Barracuda Link Balancer ............ .. .. .... .. .. .. .... .. .. .. .. .... . 6
The Barracuda Link Balancer routes and manages traffic across multiple Internet connections or
WAN links. It optimizes the use of multiple Internet links, such as T1s, T3s, E1s, DSL and cable links
from one or more Internet service providers. By combining WAN links from one or multiple Internet
service providers, you can reduce the need to purchase multiple high speed and high cost links to
handle the daily Internet usage. The Barracuda Link Balancer:
•aggregates Internet links
•provides automated failover
•manages bandwidth
•performs Quality of Service (QoS) for Internet applications
•acts as a traditional firewall.
Note: The Barracuda Link Balancer is not designed for load balancing that distributes
incoming traffic across multiple servers. The Barracuda Link Balancer routes and manages
traffic across multiple Internet links.
As shown in Figure 1.1, the Barracuda Link Balancer provides an interface between multiple Internet
connections and your clients and servers.
Introduction 5
Figure 1.1: Barracuda Link Balancer Architecture
Features of the Barracuda Link Balancer
This section describes the features of the Barracuda Link Balancer:
Web Administration Interface ..............................................................8
6 Barracuda Link Balancer Administrator’s Guide
Link Management
The Barracuda Link Balancer can manage links that have static or dynamic (DHCP) IP addresses and
can authenticate using PPPoE.
Aggregating Link Bandwidth
The Barracuda Link Balancer automatically aggregates Internet bandwidth from multiple link s to the
same or diverse sources. Administrators can choose multiple links to the same or different ISPs for
the purposes of consolidating access to affordable Internet bandwidth.
Any single session (e.g. a TCP stream) has at most only the bandwidth from any one WAN link. One
computer may have more than one session if it is connected to more than one remote site.
Link Failover
The Barracuda Link Balancer regularly checks the health of each Inte rnet link and only send s traffic
on available links. If it detects a link failure, the failed link is removed from link balancing and no
traffic will be sent on that link. When the failed link becomes available again, the Barracuda Link
Balancer will resume sending traffic on that link. All of this happens without administrator
intervention.
If a link fails, existing sessions on that link will be disconn ected. Client s whose traffic was using th e
failed link will have to reconnect to their destination. Rathe r than having to wait for the origina l link
to be restored, they will be able to reconnect quickly using another av ailable link.
Persistence
The Barracuda Link Balancer automatically tracks the IP addresses of each client / source and
corresponding server / destination. As long as the source and dest ination IP address pair are the same,
traffic between them will use the same link. If traffic from an already tracked source IP address is
detected, it may be sent on a different link if the destination IP address is unique.
Bandwidth Management and Quality of Service (QoS)
The Barracuda Link Balancer includes software that can automatically prioritize critical Internet
applications. For example, you can assign priority to Web browsing and email while giving peer-topeer applications and media streaming a lower priority. In this way, you can ensure that bandwidthintensive applications do not interfere with business-critical operations.
You can also assign a higher priority to traffic originating from one set of IP addresses and to traffic
destined for a set of IP addresses.
Chapter 1: Introduction 7
Link Load Balancing
When traffic from a new client IP address is detect ed, the Barracuda Link Balancer determines which
link to use. It calculates the available capacity for each link based on link speed and current usage.
The link with the largest available capacity will be selected.
Traditional Firewall
The Barracuda Link Balancer incorporates standard firewa ll fu nctionality, including:
•Network address translation (NA T) - Also known as masquerading or general purpose NAT, this
allows the Barracuda Link Balancer to isolate internal network traffic from the Internet.
•1:1 NAT - 1:1 NA T allows administrators to directly assign ex ternal addresses to internal clients.
Ideal for hosting internal applications or services requiring regular outbound requests such as
SMTP, 1:1 NAT provides a secure method to match additional external addresses with a single
internal client for inbound and outbound traffic.
•Port forwarding - Port forwarding allows the same external addresses used for Internet and
WAN bandwidth aggregation to be used for network access.
•IP access lists - The use of IP access lists enable administrators to allow or deny access, either
inbound or outbound, to remote networks, clients, applications, services and ports.
•Port blocking.
•Assistance in preventing and mitigating distributed denial of service attacks (DDoS).
Local Network Services
The Barracuda Link Balancer includes the following local network services:
•DHCP server - The Barracuda Link Balancer can automatically provision client IP addresses
using the DHCP protocol. Along with defining traditional DHCP options, administrators may
view active leases in real time.
•DNS caching server - The Barracuda Link Balancer is configured to query the roo t name servers
or proxy DNS requests to your ISP’s DNS servers. With DNS caching enabled, frequent DNS
requests are served quickly and locally from the Barracuda Link Balancer’ s internal DNS
processes.
Web Administration Interface
The Barracuda Link Balancer configuration can be administered through an SSL-secured Web
interface. The Web interface can also be used for monitoring traffic statistics and doing
troubleshooting.
8 Barracuda Link Balancer Administrator’s Guide
Installing the Barracuda Link Balancer
This chapter provides instructions for installing the Barracuda Link Balancer. It includes the
following topics:
Side by Side with Your Firewall Installation............................ .. .. .... . 16
Once you have chosen your deployment scenario, go to t he section that d escribes ho w to install your
Barracuda Link Balancer in that configuration. There are many steps and some are similar between
the two methods, but for ease of configuration they are in different sections.
Deployment Scenarios
The first step in setting up your Barracuda Link Balancer is to decide which type of deployment is
most suitable to your network.
Chapter 2
There are three options that you may consider when choosing how to deploy the Barracuda Link
Balancer in your network. Detailed instructions for the two recommen ded options are provided in this
chapter. The three options to consider are:
• Replace Firewall on page 9 - replace your firewall with the Barracuda Link Balancer.
• In Front of Firewall on page 10 - (not recommended) place the Barracuda Link Balancer
between the Internet and your firewall.
• Side by Side with Firewall on page 10 - install the Barracuda Link Balancer beside your
firewall.
You may also choose to implement the Side by Side option for testing purposes and then switch over
to replacing your firewall as a permanent deployment.
Replace Firewall
You may choose to use the Barracuda Link Balance r as the default gat eway for your network. In this
configuration, the Barracuda Link Balancer sits be tween the Inte rnet and your switch, acting as both
firewall and router, and replacing your existing firewall or router. The Barracuda Link Balancer
applies traditional network firewall ru le s and can service DHCP and DNS to local clients.
Installing the Barracuda Link Balancer 9
Benefits:
Using the Barracuda Link Balancer as a firewall, router and link balancer means there is only one
device to administer. This simplifies the network management task.
To Install the Barracuda Link Balancer Replacing Your Firewall
Installation instructions are found in this guide at Replacing Your Firewall Installation on page 11.
This configuration is similar to what is descri bed in the Barra cuda Link Balancer Qu ick Start Guide .
In Front of Firewall
You can also install the Barracuda Link Balancer between t he Internet and your existing firewall. The
Internet links plug into the Barracuda Link Balancer’s multiple WAN ports and the firewall is
connected to the Barracuda Link Balancer’s LAN port.
Benefits:
No need to copy firewall configuration to the Barracuda Link Balancer.
Limitations:
Connecting the Barracuda Link Balancer to the Internet and placing a firewall directly after it will
create two levels of Network Address Translation, w hich is a situation known as double NAT. Double
NAT may cause problems with some types of traffic, including VPN, SIP, and FTP, but some ot her
types, such as HTTP, IMAP and SMTP traffic, may be unaffected.
Because of the complications that double NAT brings to your network, this configuration is not
recommended. Consider using the Side by Side deployment option instead.
Side by Side with Firewall
You can deploy the Barracuda Link Balancer without replacing or m aking any changes to your
existing firewall or router. In this scenario, all incoming traffic passes through your existing
firewall.The Barracuda Link Balancer is connected only to the new Internet links. Those links are
used only for outgoing traffic originating from systems that have specified the Barracuda Link
Balancer as their default gateway. Typically, the systems that route their outgoing traffic through the
Barracuda Link Balancer are clients rather than servers.
This deployment may be especially useful when introducing the Barracuda Link Balancer to your
network. You can test its connectivity and fun ct ion al ity with ou t d istu r bi ng th e rest o f yo ur network.
An example where this deployment would be useful as a long term option is if you want only outgoing
client traffic to use new faster or less expensive links. In coming traffic would still be handled by your
existing firewall. The outgoing traffic from the clients would be processed by the Barracuda Link
Balancer and sent on any one of the new Internet link(s).
Voice over IP, VPN and other traffic that you want to bypass the Barracuda Link Balancer entirely
can be routed through your existing network in this option.
10 Barracuda Link Balancer Administrator’s Guide
Benefits:
•limited changes to network configuration, including the VPN if you have one
•creates another pathway for traffic to flow from your clients
Limitations:
•traffic is isolated
•may increase management burden
•may have to configure DHCP server
•must assign a new gateway for clients that will use the Barracuda Link Balancer
•depending on your configuration, this deployment may require changing the network addresses
of your clients, which in turn may require you to reboot all of your computers
Figure 2.1 gives an example of the Barracuda Link Balancer installed side by side with a firewall.
Figure 2.1: Side by Side with Firewall Example Installation
To Install the Barracuda Link Balancer Side by Side with Your Firewall
Installation instructions are found in this guide at Side by Side with Your Firewall Installatio n on page
16.
Replacing Your Firewall Installation
These instructions describe how to deploy the Barracuda Link Balancer as the default gateway for
your network. In this configuration, the Barracuda Link Balancer sits between the Internet and your
switch, acting as both firewall and router, and replacing your existing firewall or router.
Chapter 2: Installing the Barracuda Link Balancer 11
The steps documented here provide a method to configure the Barracuda Link Balancer completely
before connecting it to the Internet. This method assumes that you will perform the configuration
steps at some convenient location, such as next to a computer where you can look at your firewall
settings, and then move the Barracuda Link Balancer to the area where it will be permanently placed.
Only then will you plug the cables from the WAN links into the Barracuda Link Balancer. If you
decide to configure the Barracuda Link Balancer entirely in its permanen t location, then you will only
have to configure the LAN IP address once.
There are a number of steps to install the Barracuda Link Balancer while replacing your firewall:
Step 1. Prepare for Installation (Replace Your Firewall)
Step 2. Physically Connect to the Barracuda Link Balancer (Replace Your Firewall)
Step 3. Configure with Temporary LAN IP Address and Network Settings (Replace Your Firewall)
Step 4. Log into the Barracuda Link Balancer Web Interface (Replace Your Firewall)
Step 5. Configure the WAN Links (Replace Your Firewall)
Step 6. Configure the Firewall (Replace Your Firewall)
Step 7. Change the Administrator Password (Replace Your Firewall)
Step 8. Set Permanent LAN IP Address (Replace Your Firewall)
Step 9. Permanently Install the Barracuda Link Balancer (Replace Your Firewall)
Step 10. Test Connectivity (Repl ace You r Firewall)
Step 11. Activate Subscription (Replace Your Firewall)
Step 12. Update the Firmware (Replace Your Firewall)
Step 13. Connect Other Subnets (Replace Your Firewall)
Step 14. Include All Clients (Replace Your Firewall)
Step 1. Prepare for Installation (Replace Your Firewall)
Before installing your Barracuda Link Balancer, complete the following tasks:
1.Verify you have the necessary equi pment:
• Barracuda Link Balancer (check that you have received the correct model)
• AC power cord
• Ethernet cables
• Mounting rails and screws
•VGA monitor
• PS2 keyboard
2.If you already have a firewall and plan to replace it, retrieve the settings so that they can be
configured in the Barracuda Link Balancer. Record the IP address and type of link for each
Internet connection.
Step 2. Physically Connect to the Barracuda Link Balancer (Replace
Your Firewall)
To perform initial configuration of the Barracuda Link Balancer:
1.Connect a standard VGA Monitor, PS2 Keyboard, and AC power cord to the Barracuda Link
Balancer.
After you connect the AC power cord, the Barracuda Link Balancer may power on for a few
seconds and then power off. This behavior is normal.
2.Press the blue Power button located on the front of panel to turn the unit on.
12 Barracuda Link Balancer Administrator’s Guide
The Barracuda Link Balancer will display the Boot Menu initially, and the Administrative Console
login prompt once fully booted.
Step 3. Configure with Temporary LAN IP Address and Network
Settings (Replace Your Firewall)
Set the LAN IP address of the Barracuda Link Balancer address to be on the same subnet as the
computer that you want to use to configure it. This is a temp orary setting and it will be changed la ter
after initial configuration is complete.
To begin the configuration:
1.On the Administrative Console displayed on the attached monitor, at the barracuda login
prompt, enter
2.Configure the LAN adapter so that the Barracuda Link Balancer can be accessed from the
computer you will use to configure it. Enter the IP Address, Netmask, Primary DNS Server
Secondary DNS Server as appropriate for your local area network.
and
3.Save your changes and exit.
4.Connect an Ethernet cable from your LAN to the LAN port on the back panel of the Barracuda
Link Balancer.
admin for the login and admin for the password.
Figure 2.2: Back panel of the Barracuda Link Balancer
Step 4. Log into the Barracuda Link Balancer Web Interface (Replace
Your Firewall)
To log into the Web interface using a computer that is connected to the same subnet as the Barracuda
Link Balancer’s LAN adapter, follow these steps:
1.From a Web browser, enter the LAN IP address of the Barracuda Link Balancer followed by a
colon and 8000, which is the default Web interface HTTP port.
For example:
2.To log into the administration interface, enter admin for the username and admin for the
password.
http://192.168.200.200:8000.
Step 5. Configure the WAN Links (Replace Your Firewall)
To identify the Internet links that will be connected to the Barracuda Link Balancer:
1.Go to the
2.Click the WAN1 port in th e graphic.
Basic > Links page.
Chapter 2: Installing the Barracuda Link Balancer 13
3.In the Links Configuration box enter the details for the link to be connected to the WAN1 port.
4.Click
5.Repeat for each link that will be co nnected to this unit.
Save Changes.
Step 6. Configure the Firewall (Replace Your Firewall)
Configure the firewall rules to match the settings of your current firewall:
1.Go to the
2.Go to the
3.Go to the
4.Go to the
More information about firewall settings can be found at Configuring the Firewall on page 24.
Firewall > Inbound page to add inbound rules.
Firewall > Outbound page to add outbound rules.
Firewall > Applications page to add rules on an application specific basis.
Firewall > Bandwidth Mgmt page to add Quality of Service rules.
Step 7. Change the Administrator Password (Replace Your Firewall)
To prevent unauthorized use, change the default administrat or password to a more secure password.
You can only change the administrator password for the Web interface. You cannot change the
password for the Administrative Console, but this is only accessible via the keyboard which you can
disconnect at any time.
To change the administrator password for the Web interface:
1.Go to
2.Click
Basic > Administration and enter your old and new passwords.
Save Password.
Step 8. Set Permanent LAN IP Address (Replace Your Firewall)
If the permanent LAN IP address is different, change it now:
1.Using the Web interface: Go to the
and Subnet Mask. Click
will terminate.
2.Or use the Administrative Console via the attached keyboard.
Save Changes. If the address is on a different subnet, your connection
Step 9. Permanently Install the Barracuda Link Balancer (Replace Your
Firewall)
Now that the Barracuda Link Balancer is configur ed , in stal l it in its permanent location and connect
it to your WAN links:
1.Mount the Barracuda Link Balancer in a 19-inch rack or place it in a stable location. To ensure
proper ventilation, do not block the cooling vents on the front and back of the unit.
2.Connect each of the cables from the Internet links in to a WAN port on the front of the Barracuda
Link Balancer. The ports are labeled WAN1, WAN2, etc. These ports correspond to the WAN
14 Barracuda Link Balancer Administrator’s Guide
Basic > Administration page and change the IP Address
Loading...
+ 31 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.