We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Link Balancer

How do I install the Barracuda Link Balancer in front of my existing firewall?

  • Type: Knowledgebase
  • Date changed: 11 months ago
Solution #00003963

Scope:
All Barracuda Link Balancers all models, firmware version 1.1.015 and above..

Answer:
To minimize changes to your existing environment, it is possible to use the Barracuda Link Balancer in conjunction with an existing network firewall deployed on the network.

If you'd like to use the Barracuda Link Balancer with your own existing network firewall, you should first disable firewall features built into the Barracuda Link Balancer.

You should also ensure that you have a static IP address that you can dedicate as the WAN IP for your Barracuda Link Balancer on your existing Internet connection.  In addition to a dedicated WAN IP address for your Barracuda Link Balancer, you should know all of the static WAN IP addresses that you are currently using for your existing Internet connection.

The recommended process for disabling the built-in firewall and installing in place generally involves the following process:
  1. installation of the Barracuda Link Balancer on a temporary network setup
  2. disabling the Barracuda Link Balancer built-in firewall
  3. setting permanent LAN and WAN IP addresses and DNS information
  4. installation of the Barracuda Link Balancer in the production network
  5. testing

Detailed instructions follow:

Step 1: Activate your Barracuda Link Balancer with a temporary network set up
  1. Connect your Barracuda Link Balancer to a keyboard, VGA monitor, and power source.  
  2. Connect the LAN port on the back of the Barracuda Link Balancer to the network that you can access from an Internet-enabled desktop or laptop computer with a Web browser.  Then, power on the Barracuda Link Balancer.
  3. Login to the console interface.  The default username is admin and the default password is admin.  From the console interface, configure the LAN adapter so that the Barracuda Link Balancer can be accessed from the computer you will use for configuration. Enter the IP Address, Netmask, Primary DNS Server and Secondary DNS Server as appropriate for your local area network.  Save your changes and exit.
  4. From your Web browser, login to the Web interface.  Enter the LAN IP address of the Barracuda Link Balancer followed by a colon and 8000, the default Web interface HTTP port (e.g., http://192.168.200.200:8000).  The default username is admin and the default password is admin.
  5. From the Basic > Status page, activate your Barracuda Link Balancer.  If your Barracuda Link Balancer cannot reach the Internet itself, you will likely have to enter an activation code from the Barracuda Networks Activation site into the Barracuda Link Balancer Web interface.
Step 2:  Disable the Barracuda Link Balancer Network Firewall.
  1. Go to the Firewall > Mode page.
  2. Under Operating Mode, click the Disabled radio button
  3. Click the OK button on the alert that pops up warning you that the change in operating mode will require a reboot.
Step 3: Configure the WAN and LAN links with the permanent information.
  1. After the Barracuda Link Balancer has rebooted, login to the Web interface.
  2. Go to the Basic > Links page.
  3. Click the WAN1 port in the graphic
  4. In the Links Configuration box, enter your dedicated WAN IP address for the Barracuda Link Balancer as well as the appropriate details.  In addition, ensure that you enter the other static IP addresses for your existing Internet connection in the Additional IP Addresses field.  Also enter the gateway, ISP DNS information and be sure to configure all three health checks. Click Save Changes.
  5. Repeat steps 3 and 4 for other WAN links that will be connected to this unit.
  6. In the Basic > IP Configuration page, enter the permanent LAN IP address (Permanent LAN address should not be on the same subnet as the LAN behind the Existing firewall).  Click Save Changes and wait for a few seconds for the change to commit.
  7. Power down your Barracuda Link Balancer using the power button on the front of the unit.  Please be sure to wait for the Barracuda Link Balancer to shut down cleanly.
Step 4: Permanently install the Barracuda Link Balancer.
  1. Mount the Barracuda Link Balancer in a 19-inch rack or place it in a stable location. To ensure proper ventilation, do not block the cooling vents on the front and back of the unit.
  2. Connect each of the cables from the Internet links into a WAN port on the front of the Barracuda Link Balancer. The ports are labeled WAN1, WAN2, etc. These ports correspond to the WAN ports configured via the Web Interface. Be sure to connect them according to your configuration. It is recommended that you label the Ethernet cables.
  3. Connect an Ethernet cable from your network switch to the LAN Ethernet port on the back panel of the Barracuda Link Balancer. If a network firewall is setup behind the Link Balancer, the Link Balancer must be connected to the outside interface of the firewall, and the firewall's outside interface must be configured with an IP address in one or more of the WAN link subnets. The LAN IP of the Barracuda can be in any subnet or a private IP and is inconsequential when the Link Balancer is in Firewall disabled mode.

Step 5: Test Connectivity.

  1. Firewall settings should remain the same, your network firewall should be using your Network service providers gateway.
  2. Confirm that you can access the Internet from the client computer; If this works, continue
  3. Log into the Barracuda Web interface using the permanent LAN IP address and go to the Basic > Links page. The Status of each link should appear as Connected. You can see the utilization of each link by moving the mouse over the graphic.
  4. Generate some traffic; Open more tabs in your browser, and download files from the Internet for example. Go to the Basic > Status page to view graphs which show the incoming and outgoing traffic for each link.
  5. You can continue to monitor the WAN links using the Basic > Links page and the Basic > Status page.


Link to This Page:

https://campus.barracuda.com/solution/50160000000HZqlAAG