Barracuda Link Balancer Administrator s Guide

Transcription

1 Barracuda Link Balancer Administrator s Guide Version 1.0 Barracuda Networks Inc S. Winchester Blvd. Campbell, CA

2 Copyright Notice Copyright 2008, Barracuda Networks v All rights reserved. Use of this product and this manual is subject to license. Information in this document is subject to change without notice. Trademarks Barracuda Link Balancer is a trademark of Barracuda Networks. All other brand and product names mentioned in this document are registered trademarks or trademarks of their respective holders. ii Barracuda Link Balancer Administrator s Guide

3 Contents Chapter 1 Introduction Overview Features of the Barracuda Link Balancer Link Management Aggregating Link Bandwidth Link Failover Persistence Bandwidth Management and Quality of Service (QoS) Link Load Balancing Traditional Firewall Local Network Services Web Administration Interface Chapter 2 Installing the Barracuda Link Balancer Deployment Scenarios Replace Firewall To Install the Barracuda Link Balancer Replacing Your Firewall In Front of Firewall Side by Side with Firewall To Install the Barracuda Link Balancer Side by Side with Your Firewall Replacing Your Firewall Installation Step 1. Prepare for Installation (Replace Your Firewall) Step 2. Physically Connect to the Barracuda Link Balancer (Replace Your Firewall) Step 3. Configure with Temporary LAN IP Address and Network Settings (Replace Your Firewall)13 Step 4. Log into the Barracuda Link Balancer Web Interface (Replace Your Firewall) Step 5. Configure the WAN Links (Replace Your Firewall) Step 6. Configure the Firewall (Replace Your Firewall) Step 7. Change the Administrator Password (Replace Your Firewall) Step 8. Set Permanent LAN IP Address (Replace Your Firewall) Step 9. Permanently Install the Barracuda Link Balancer (Replace Your Firewall) Step 10. Test Connectivity (Replace Your Firewall) Step 11. Activate Subscription (Replace Your Firewall) Step 12. Update the Firmware (Replace Your Firewall) Step 13. Connect Other Subnets (Replace Your Firewall) Step 14. Include All Clients (Replace Your Firewall) Side by Side with Your Firewall Installation Step 1. Preparing for Installation (Side by Side with Your Firewall) Step 2. Physically Connect to the Barracuda Link Balancer (Side by Side with Your Firewall) 17 Step 3. Configure LAN IP Address and Network Settings (Side by Side with Your Firewall). 17 Step 4. Log into the Barracuda Link Balancer Web Interface (Side by Side with Your Firewall)18 Step 5. Configure the WAN Links (Side by Side with Your Firewall) Step 6. Permanently Install the Barracuda Link Balancer (Side by Side with Your Firewall). 18 Step 7. Test Connectivity (Side by Side with Your Firewall) Step 8. Activate Subscription (Side by Side with Your Firewall) Step 9. Change the Administrator Password (Side by Side with Your Firewall) Contents iii

4 Step 10. Update the Firmware (Side by Side with Your Firewall) Step 11. Connect Other Subnets (Side by Side with Your Firewall) Step 12. Include All Clients (Side by Side with Your Firewall) Chapter 3 Configuring the Barracuda Link Balancer Configuring the Barracuda Link Balancer Controlling Access to the Administration Interface Setting Addresses for Alerts Customizing the Appearance of the Web Interface Setting the Time Zone of the System Enabling SSL for Administration Adding Static Routes Configuring Network Information Updating, Adding or Viewing WAN Link Configuration Configuring the Firewall Firewall Functionality Firewall Rules Execution Adding Inbound Firewall Rules Adding Outbound Firewall Rules Creating a Custom Application Specifying Quality of Service Chapter 4 Managing the Barracuda Link Balancer Monitoring the Barracuda Link Balancer Checking Status Monitoring Events Viewing System Tasks Maintaining the Barracuda Link Balancer Backing up and Restoring Your System Configuration Updating the Firmware of Your Barracuda Link Balancer Replacing a Failed System Reloading, Restarting, and Shutting Down the System Using the Reset Button to Reset the LAN IP address Using the Built-in Troubleshooting Tools Rebooting the System in Recovery Mode Appendix A Limited Warranty and License Limited Warranty Exclusive Remedy Exclusions and Restrictions Software License Energize Update Software License Open Source Licensing iv Barracuda Link Balancer Administrator s Guide

5 Chapter 1 Introduction This chapter provides an overview of the Barracuda Link Balancer and includes the following topics: Overview... 5 Features of the Barracuda Link Balancer... 6 Overview The Barracuda Link Balancer routes and manages traffic across multiple Internet connections or WAN links. It optimizes the use of multiple Internet links, such as T1s, T3s, E1s, DSL and cable links from one or more Internet service providers. By combining WAN links from one or multiple Internet service providers, you can reduce the need to purchase multiple high speed and high cost links to handle the daily Internet usage. The Barracuda Link Balancer: aggregates Internet links provides automated failover manages bandwidth performs Quality of Service (QoS) for Internet applications acts as a traditional firewall. Note: The Barracuda Link Balancer is not designed for load balancing that distributes incoming traffic across multiple servers. The Barracuda Link Balancer routes and manages traffic across multiple Internet links. As shown in Figure 1.1, the Barracuda Link Balancer provides an interface between multiple Internet connections and your clients and servers. Introduction 5

6 Figure 1.1: Barracuda Link Balancer Architecture Features of the Barracuda Link Balancer This section describes the features of the Barracuda Link Balancer: Link Management... 7 Aggregating Link Bandwidth... 7 Link Failover... 7 Persistence... 7 Bandwidth Management and Quality of Service (QoS)... 7 Link Load Balancing... 8 Traditional Firewall... 8 Local Network Services... 8 Web Administration Interface Barracuda Link Balancer Administrator s Guide

7 Link Management The Barracuda Link Balancer can manage links that have static or dynamic (DHCP) IP addresses and can authenticate using PPPoE. Aggregating Link Bandwidth The Barracuda Link Balancer automatically aggregates Internet bandwidth from multiple links to the same or diverse sources. Administrators can choose multiple links to the same or different ISPs for the purposes of consolidating access to affordable Internet bandwidth. Any single session (e.g. a TCP stream) has at most only the bandwidth from any one WAN link. One computer may have more than one session if it is connected to more than one remote site. Link Failover The Barracuda Link Balancer regularly checks the health of each Internet link and only sends traffic on available links. If it detects a link failure, the failed link is removed from link balancing and no traffic will be sent on that link. When the failed link becomes available again, the Barracuda Link Balancer will resume sending traffic on that link. All of this happens without administrator intervention. If a link fails, existing sessions on that link will be disconnected. Clients whose traffic was using the failed link will have to reconnect to their destination. Rather than having to wait for the original link to be restored, they will be able to reconnect quickly using another available link. Persistence The Barracuda Link Balancer automatically tracks the IP addresses of each client / source and corresponding server / destination. As long as the source and destination IP address pair are the same, traffic between them will use the same link. If traffic from an already tracked source IP address is detected, it may be sent on a different link if the destination IP address is unique. Bandwidth Management and Quality of Service (QoS) The Barracuda Link Balancer includes software that can automatically prioritize critical Internet applications. For example, you can assign priority to Web browsing and while giving peer-topeer applications and media streaming a lower priority. In this way, you can ensure that bandwidthintensive applications do not interfere with business-critical operations. You can also assign a higher priority to traffic originating from one set of IP addresses and to traffic destined for a set of IP addresses. Chapter 1: Introduction 7

8 Link Load Balancing When traffic from a new client IP address is detected, the Barracuda Link Balancer determines which link to use. It calculates the available capacity for each link based on link speed and current usage. The link with the largest available capacity will be selected. Traditional Firewall The Barracuda Link Balancer incorporates standard firewall functionality, including: Network address translation (NAT) - Also known as masquerading or general purpose NAT, this allows the Barracuda Link Balancer to isolate internal network traffic from the Internet. 1:1 NAT - 1:1 NAT allows administrators to directly assign external addresses to internal clients. Ideal for hosting internal applications or services requiring regular outbound requests such as SMTP, 1:1 NAT provides a secure method to match additional external addresses with a single internal client for inbound and outbound traffic. Port forwarding - Port forwarding allows the same external addresses used for Internet and WAN bandwidth aggregation to be used for network access. IP access lists - The use of IP access lists enable administrators to allow or deny access, either inbound or outbound, to remote networks, clients, applications, services and ports. Port blocking. Assistance in preventing and mitigating distributed denial of service attacks (DDoS). Local Network Services The Barracuda Link Balancer includes the following local network services: DHCP server - The Barracuda Link Balancer can automatically provision client IP addresses using the DHCP protocol. Along with defining traditional DHCP options, administrators may view active leases in real time. DNS caching server - The Barracuda Link Balancer is configured to query the root name servers or proxy DNS requests to your ISP s DNS servers. With DNS caching enabled, frequent DNS requests are served quickly and locally from the Barracuda Link Balancer s internal DNS processes. Web Administration Interface The Barracuda Link Balancer configuration can be administered through an SSL-secured Web interface. The Web interface can also be used for monitoring traffic statistics and doing troubleshooting. 8 Barracuda Link Balancer Administrator s Guide

9 Chapter 2 Installing the Barracuda Link Balancer This chapter provides instructions for installing the Barracuda Link Balancer. It includes the following topics: Deployment Scenarios... 9 Replacing Your Firewall Installation Side by Side with Your Firewall Installation Once you have chosen your deployment scenario, go to the section that describes how to install your Barracuda Link Balancer in that configuration. There are many steps and some are similar between the two methods, but for ease of configuration they are in different sections. Deployment Scenarios The first step in setting up your Barracuda Link Balancer is to decide which type of deployment is most suitable to your network. There are three options that you may consider when choosing how to deploy the Barracuda Link Balancer in your network. Detailed instructions for the two recommended options are provided in this chapter. The three options to consider are: Replace Firewall on page 9 - replace your firewall with the Barracuda Link Balancer. In Front of Firewall on page 10 - (not recommended) place the Barracuda Link Balancer between the Internet and your firewall. Side by Side with Firewall on page 10 - install the Barracuda Link Balancer beside your firewall. You may also choose to implement the Side by Side option for testing purposes and then switch over to replacing your firewall as a permanent deployment. Replace Firewall You may choose to use the Barracuda Link Balancer as the default gateway for your network. In this configuration, the Barracuda Link Balancer sits between the Internet and your switch, acting as both firewall and router, and replacing your existing firewall or router. The Barracuda Link Balancer applies traditional network firewall rules and can service DHCP and DNS to local clients. Installing the Barracuda Link Balancer 9

10 Benefits: Using the Barracuda Link Balancer as a firewall, router and link balancer means there is only one device to administer. This simplifies the network management task. To Install the Barracuda Link Balancer Replacing Your Firewall Installation instructions are found in this guide at Replacing Your Firewall Installation on page 11. This configuration is similar to what is described in the Barracuda Link Balancer Quick Start Guide. In Front of Firewall You can also install the Barracuda Link Balancer between the Internet and your existing firewall. The Internet links plug into the Barracuda Link Balancer s multiple WAN ports and the firewall is connected to the Barracuda Link Balancer s LAN port. Benefits: No need to copy firewall configuration to the Barracuda Link Balancer. Limitations: Connecting the Barracuda Link Balancer to the Internet and placing a firewall directly after it will create two levels of Network Address Translation, which is a situation known as double NAT. Double NAT may cause problems with some types of traffic, including VPN, SIP, and FTP, but some other types, such as HTTP, IMAP and SMTP traffic, may be unaffected. Because of the complications that double NAT brings to your network, this configuration is not recommended. Consider using the Side by Side deployment option instead. Side by Side with Firewall You can deploy the Barracuda Link Balancer without replacing or making any changes to your existing firewall or router. In this scenario, all incoming traffic passes through your existing firewall.the Barracuda Link Balancer is connected only to the new Internet links. Those links are used only for outgoing traffic originating from systems that have specified the Barracuda Link Balancer as their default gateway. Typically, the systems that route their outgoing traffic through the Barracuda Link Balancer are clients rather than servers. This deployment may be especially useful when introducing the Barracuda Link Balancer to your network. You can test its connectivity and functionality without disturbing the rest of your network. An example where this deployment would be useful as a long term option is if you want only outgoing client traffic to use new faster or less expensive links. Incoming traffic would still be handled by your existing firewall. The outgoing traffic from the clients would be processed by the Barracuda Link Balancer and sent on any one of the new Internet link(s). Voice over IP, VPN and other traffic that you want to bypass the Barracuda Link Balancer entirely can be routed through your existing network in this option. 10 Barracuda Link Balancer Administrator s Guide

11 Benefits: limited changes to network configuration, including the VPN if you have one creates another pathway for traffic to flow from your clients Limitations: traffic is isolated may increase management burden may have to configure DHCP server must assign a new gateway for clients that will use the Barracuda Link Balancer depending on your configuration, this deployment may require changing the network addresses of your clients, which in turn may require you to reboot all of your computers Figure 2.1 gives an example of the Barracuda Link Balancer installed side by side with a firewall. Figure 2.1: Side by Side with Firewall Example Installation To Install the Barracuda Link Balancer Side by Side with Your Firewall Installation instructions are found in this guide at Side by Side with Your Firewall Installation on page 16. Replacing Your Firewall Installation These instructions describe how to deploy the Barracuda Link Balancer as the default gateway for your network. In this configuration, the Barracuda Link Balancer sits between the Internet and your switch, acting as both firewall and router, and replacing your existing firewall or router. Chapter 2: Installing the Barracuda Link Balancer 11

12 The steps documented here provide a method to configure the Barracuda Link Balancer completely before connecting it to the Internet. This method assumes that you will perform the configuration steps at some convenient location, such as next to a computer where you can look at your firewall settings, and then move the Barracuda Link Balancer to the area where it will be permanently placed. Only then will you plug the cables from the WAN links into the Barracuda Link Balancer. If you decide to configure the Barracuda Link Balancer entirely in its permanent location, then you will only have to configure the LAN IP address once. There are a number of steps to install the Barracuda Link Balancer while replacing your firewall: Step 1. Prepare for Installation (Replace Your Firewall) Step 2. Physically Connect to the Barracuda Link Balancer (Replace Your Firewall) Step 3. Configure with Temporary LAN IP Address and Network Settings (Replace Your Firewall) Step 4. Log into the Barracuda Link Balancer Web Interface (Replace Your Firewall) Step 5. Configure the WAN Links (Replace Your Firewall) Step 6. Configure the Firewall (Replace Your Firewall) Step 7. Change the Administrator Password (Replace Your Firewall) Step 8. Set Permanent LAN IP Address (Replace Your Firewall) Step 9. Permanently Install the Barracuda Link Balancer (Replace Your Firewall) Step 10. Test Connectivity (Replace Your Firewall) Step 11. Activate Subscription (Replace Your Firewall) Step 12. Update the Firmware (Replace Your Firewall) Step 13. Connect Other Subnets (Replace Your Firewall) Step 14. Include All Clients (Replace Your Firewall) Step 1. Prepare for Installation (Replace Your Firewall) Before installing your Barracuda Link Balancer, complete the following tasks: 1. Verify you have the necessary equipment: Barracuda Link Balancer (check that you have received the correct model) AC power cord Ethernet cables Mounting rails and screws VGA monitor PS2 keyboard 2. If you already have a firewall and plan to replace it, retrieve the settings so that they can be configured in the Barracuda Link Balancer. Record the IP address and type of link for each Internet connection. Step 2. Physically Connect to the Barracuda Link Balancer (Replace Your Firewall) To perform initial configuration of the Barracuda Link Balancer: 1. Connect a standard VGA Monitor, PS2 Keyboard, and AC power cord to the Barracuda Link Balancer. After you connect the AC power cord, the Barracuda Link Balancer may power on for a few seconds and then power off. This behavior is normal. 2. Press the blue Power button located on the front of panel to turn the unit on. 12 Barracuda Link Balancer Administrator s Guide

13 The Barracuda Link Balancer will display the Boot Menu initially, and the Administrative Console login prompt once fully booted. Step 3. Configure with Temporary LAN IP Address and Network Settings (Replace Your Firewall) Set the LAN IP address of the Barracuda Link Balancer address to be on the same subnet as the computer that you want to use to configure it. This is a temporary setting and it will be changed later after initial configuration is complete. To begin the configuration: 1. On the Administrative Console displayed on the attached monitor, at the barracuda login prompt, enter admin for the login and admin for the password. 2. Configure the LAN adapter so that the Barracuda Link Balancer can be accessed from the computer you will use to configure it. Enter the IP Address, Netmask, Primary DNS Server and Secondary DNS Server as appropriate for your local area network. 3. Save your changes and exit. 4. Connect an Ethernet cable from your LAN to the LAN port on the back panel of the Barracuda Link Balancer. Figure 2.2: Back panel of the Barracuda Link Balancer Step 4. Log into the Barracuda Link Balancer Web Interface (Replace Your Firewall) To log into the Web interface using a computer that is connected to the same subnet as the Barracuda Link Balancer s LAN adapter, follow these steps: 1. From a Web browser, enter the LAN IP address of the Barracuda Link Balancer followed by a colon and 8000, which is the default Web interface HTTP port. For example: 2. To log into the administration interface, enter admin for the username and admin for the password. Step 5. Configure the WAN Links (Replace Your Firewall) To identify the Internet links that will be connected to the Barracuda Link Balancer: 1. Go to the Basic > Links page. 2. Click the WAN1 port in the graphic. Chapter 2: Installing the Barracuda Link Balancer 13

14 3. In the Links Configuration box enter the details for the link to be connected to the WAN1 port. 4. Click Save Changes. 5. Repeat for each link that will be connected to this unit. Step 6. Configure the Firewall (Replace Your Firewall) Configure the firewall rules to match the settings of your current firewall: 1. Go to the Firewall > Inbound page to add inbound rules. 2. Go to the Firewall > Outbound page to add outbound rules. 3. Go to the Firewall > Applications page to add rules on an application specific basis. 4. Go to the Firewall > Bandwidth Mgmt page to add Quality of Service rules. More information about firewall settings can be found at Configuring the Firewall on page 24. Step 7. Change the Administrator Password (Replace Your Firewall) To prevent unauthorized use, change the default administrator password to a more secure password. You can only change the administrator password for the Web interface. You cannot change the password for the Administrative Console, but this is only accessible via the keyboard which you can disconnect at any time. To change the administrator password for the Web interface: 1. Go to Basic > Administration and enter your old and new passwords. 2. Click Save Password. Step 8. Set Permanent LAN IP Address (Replace Your Firewall) If the permanent LAN IP address is different, change it now: 1. Using the Web interface: Go to the Basic > Administration page and change the IP Address and Subnet Mask. Click Save Changes. If the address is on a different subnet, your connection will terminate. 2. Or use the Administrative Console via the attached keyboard. Step 9. Permanently Install the Barracuda Link Balancer (Replace Your Firewall) Now that the Barracuda Link Balancer is configured, install it in its permanent location and connect it to your WAN links: 1. Mount the Barracuda Link Balancer in a 19-inch rack or place it in a stable location. To ensure proper ventilation, do not block the cooling vents on the front and back of the unit. 2. Connect each of the cables from the Internet links into a WAN port on the front of the Barracuda Link Balancer. The ports are labeled WAN1, WAN2, etc. These ports correspond to the WAN 14 Barracuda Link Balancer Administrator s Guide

15 ports that you configured in the Web interface. Be sure to connect them according to your configuration. It is recommended that you label the Ethernet cables. 3. Connect an Ethernet cable from your network switch to the LAN Ethernet port on the back panel of the Barracuda Link Balancer. Step 10. Test Connectivity (Replace Your Firewall) Test that the Internet links are accessible from a computer on the LAN: 1. Log into the Web interface using the permanent LAN IP address and go to the Basic > Links page. The Status of each link should appear as Connected. You can see the utilization of each link by moving the mouse over the graphic. 2. Generate some traffic, by, for example, opening more tabs in your browser and downloading files from the Internet. Go to the Basic > Status page to view graphs that show the incoming and outgoing traffic for each link. 3. You can continue to monitor the WAN links using the Basic > Links page and the Basic > Status page. Step 11. Activate Subscription (Replace Your Firewall) Now that you are connected to the Internet, verify your subscription status and activate it if you have not already done so: 1. Go to the Basic > Status page. 2. Under Subscription Status, verify that the word Current appears next to Support and Instant Replacement (if purchased). If not, click the activation link to start a new browser window that requests the Barracuda Networks Product Activation page. 3. On the Barracuda Networks Product Activation page, fill in the required fields and click Activate. A confirmation page opens to display the terms of your subscription. 4. After confirming your subscription, return to the browser window that displays the Barracuda Link Balancer Web interface. Click Refresh in the Subscription Status section of the Basic > Status page. The status of your subscription should display as Current. Note: If your subscription status does not change to Current, or if you have trouble filling out the Product Activation page, call your Barracuda Networks sales representative. Step 12. Update the Firmware (Replace Your Firewall) Go to Advanced > Firmware Update. If there is a new Latest General Release available, perform the following steps to update the system firmware: 1. Click the Download Now button located next to the Latest General Release firmware version. Click OK to acknowledge the download duration message. To avoid damaging the Barracuda Link Balancer, do not power off during an update or download. To view the progress of the download, click Refresh. You will be notified when the download is complete. 2. Click Apply Now to apply the firmware. Click OK to acknowledge the reboot message. Applying the firmware takes a few minutes to complete. Chapter 2: Installing the Barracuda Link Balancer 15

16 3. After the firmware has been applied, the Barracuda Link Balancer automatically reboots. When the system comes back up, the login page is displayed. 4. Log in to the Web interface again and navigate to Advanced > Firmware Update. Read the release notes to learn about the features of this firmware update. Step 13. Connect Other Subnets (Replace Your Firewall) To allow other subnets to use the Internet links accessible only through the Barracuda Link Balancer, add static routes: 1. On the Web interface, go to Advanced > Advanced IP Config. You can add static routes there. 2. Test connectivity from each internal network by changing the gateway IP address of a computer on each subnet to the LAN IP address of the Barracuda Link Balancer. Check that you can access the Internet from each of these test computers. Step 14. Include All Clients (Replace Your Firewall) If the IP address of the Barracuda Link Balancer is the same as the IP address of the firewall that you removed, you can skip this step. Make the Barracuda Link Balancer the default gateway: 1. Now that testing is complete, update the configuration of the DHCP server for the clients to give out the LAN IP address of the Barracuda Link Balancer as the default gateway. As the leases are renewed, each client will gain access to the new Internet links. 2. Change the default gateway of any clients with static IP addresses to the LAN IP address of the Barracuda Link Balancer. Your Barracuda Link Balancer should be ready for operation. Please refer to the next chapter, Configuring the Barracuda Link Balancer on page 21, for more configuration options. Side by Side with Your Firewall Installation There are a number of steps to install Barracuda Link Balancer side by side with your firewall. Step 1. Preparing for Installation (Side by Side with Your Firewall) Step 2. Physically Connect to the Barracuda Link Balancer (Side by Side with Your Firewall) Step 3. Configure LAN IP Address and Network Settings (Side by Side with Your Firewall) Step 4. Log into the Barracuda Link Balancer Web Interface (Side by Side with Your Firewall) Step 5. Configure the WAN Links (Side by Side with Your Firewall) Step 6. Permanently Install the Barracuda Link Balancer (Side by Side with Your Firewall) Step 7. Test Connectivity (Side by Side with Your Firewall) Step 8. Activate Subscription (Side by Side with Your Firewall) Step 9. Change the Administrator Password (Side by Side with Your Firewall) Step 10. Update the Firmware (Side by Side with Your Firewall) Step 11. Connect Other Subnets (Side by Side with Your Firewall) Step 12. Include All Clients (Side by Side with Your Firewall) 16 Barracuda Link Balancer Administrator s Guide

17 Step 1. Preparing for Installation (Side by Side with Your Firewall) Before installing your Barracuda Link Balancer, verify you have the necessary equipment: Barracuda Link Balancer (check that you have received the correct model) AC power cord Ethernet cables Mounting rails and screws VGA monitor PS2 keyboard Step 2. Physically Connect to the Barracuda Link Balancer (Side by Side with Your Firewall) To perform initial configuration of the Barracuda Link Balancer: 1. Connect a standard VGA Monitor, PS2 Keyboard, and AC power cord to the Barracuda Link Balancer. After you connect the AC power cord, the Barracuda Link Balancer may power on for a few seconds and then power off. This behavior is normal. 2. Press the blue Power button located on the front of panel to turn the unit on. The Barracuda Link Balancer will display the Boot Menu initially, and the Administrative Console login prompt once fully booted. Step 3. Configure LAN IP Address and Network Settings (Side by Side with Your Firewall) In order to add the Barracuda Link Balancer to the same LAN where the clients are, you need to configure the LAN IP address to be on the same LAN as your clients. Choose the subnet where the Barracuda Link Balancer will reside, and configure a static IP address on that subnet. Following the steps below, set the IP address and subnet mask of the LAN adapter to this static IP address. Record this IP address for later use. To begin the configuration: 1. On the Administrative Console displayed on the attached monitor, at the barracuda login prompt, enter admin for the login and admin for the password. 2. Configure the LAN adapter so that the Barracuda Link Balancer can be accessed from the computer you will use to configure it. Enter the IP Address, Netmask, Primary DNS Server and Secondary DNS Server as appropriate for your local area network. 3. Save your changes and exit. 4. Connect an Ethernet cable from your LAN to the LAN port on the back panel of the Barracuda Link Balancer. Chapter 2: Installing the Barracuda Link Balancer 17

18 Figure 2.3: Back panel of the Barracuda Link Balancer Step 4. Log into the Barracuda Link Balancer Web Interface (Side by Side with Your Firewall) To log into the Web interface using a computer that is connected to the same subnet as the Barracuda Link Balancer s LAN adapter, follow these steps: 1. From a Web browser, enter the LAN IP address of the Barracuda Link Balancer followed by a colon and 8000, which is the default Web interface HTTP port. For example: 2. To log into the administration interface, enter admin for the username and admin for the password. Step 5. Configure the WAN Links (Side by Side with Your Firewall) To identify the Internet links that will be connected to the Barracuda Link Balancer: 1. Go to the Basic > Links page. 2. Click the WAN1 port in the graphic. 3. In the Links Configuration box enter the details for the link to be connected to the WAN1 port. 4. Click Save Changes. 5. Repeat for each link that will be connected to this unit. Step 6. Permanently Install the Barracuda Link Balancer (Side by Side with Your Firewall) Now that the Barracuda Link Balancer is configured, install it in its permanent location and connect it to your WAN links: 1. Mount the Barracuda Link Balancer in a 19-inch rack or place it in a stable location. To ensure proper ventilation, do not block the cooling vents on the front and back of the unit. 2. Connect each of the cables from the Internet links into a WAN port on the front of the Barracuda Link Balancer. The ports are labeled WAN1, WAN2, etc. These ports correspond to the WAN ports that you configured in the Web interface. Be sure to connect them according to your configuration. 3. Connect an Ethernet cable from your network switch to the LAN Ethernet port on the back panel of the Barracuda Link Balancer. 18 Barracuda Link Balancer Administrator s Guide

19 Step 7. Test Connectivity (Side by Side with Your Firewall) Test that the Internet links are accessible from a client computer on the LAN: 1. Change the gateway IP address of this client computer to the LAN IP address of the Barracuda Link Balancer. 2. Check that you can access the Internet from this computer. If this test works, continue. 3. Log into the Barracuda Link Balancer Web interface and go to the Basic > Links page. The Status of each link should appear as Connected. You can see the utilization of each link by moving the mouse over the graphic. 4. Generate some traffic, by, for example, opening more tabs in your browser and downloading files from the Internet. Go to the Basic > Status page to view graphs that show the incoming and outgoing traffic for each link. 5. You can continue to monitor the WAN links using the Basic > Links page and the Basic > Status page. Step 8. Activate Subscription (Side by Side with Your Firewall) Now that you are connected to the Internet, verify your subscription status and activate it if you have not already done so: 1. Go to the Basic > Status page. 2. Under Subscription Status, verify that the word Current appears next to Support and Instant Replacement (if purchased). If not, click the activation link to start a new browser window that requests the Barracuda Networks Product Activation page. 3. On the Barracuda Networks Product Activation page, fill in the required fields and click Activate. A confirmation page opens to display the terms of your subscription. 4. After confirming your subscription, return to the browser window that displays the Barracuda Link Balancer Web interface. Click Refresh in the Subscription Status section of the Basic > Status page. The status of your subscription should display as Current. Note: If your subscription status does not change to Current, or if you have trouble filling out the Product Activation page, call your Barracuda Networks sales representative. Step 9. Change the Administrator Password (Side by Side with Your Firewall) To prevent unauthorized use, change the default administrator password to a more secure password. You can only change the administrator password for the Web interface. You cannot change the password for the Administrative Console, but this is only accessible via the keyboard which you can disconnect at any time. To change the administrator password for the Web interface: 1. Go to Basic > Administration and enter your old and new passwords. 2. Click Save Password. Chapter 2: Installing the Barracuda Link Balancer 19

20 Step 10. Update the Firmware (Side by Side with Your Firewall) Go to Advanced > Firmware Update. If there is a new Latest General Release available, perform the following steps to update the system firmware: 1. Click the Download Now button located next to the Latest General Release firmware version. Click OK to acknowledge the download duration message. To avoid damaging the Barracuda Link Balancer, do not power off during an update or download. To view the progress of the download, click Refresh. You will be notified when the download is complete. 2. Click Apply Now to apply the firmware. Click OK to acknowledge the reboot message. Applying the firmware takes a few minutes to complete. 3. After the firmware has been applied, the Barracuda Link Balancer automatically reboots. When the system comes back up, the login page is displayed. Step 11. Connect Other Subnets (Side by Side with Your Firewall) To allow other subnets to use the Internet links accessible only through the Barracuda Link Balancer, add static routes: 1. On the Web interface, go to Advanced > Advanced IP Config. You can add static routes there. 2. Test connectivity from each internal network by changing the gateway IP address of a computer on each subnet to the LAN IP address of the Barracuda Link Balancer. Check that you can access the Internet from each of these test computers. Step 12. Include All Clients (Side by Side with Your Firewall) Make the Barracuda Link Balancer the default gateway: 1. Now that testing is complete, update the configuration of the DHCP server for the clients to give out the LAN IP address of the Barracuda Link Balancer as the default gateway. As the leases are renewed, each client will gain access to the new Internet links. 2. If desired, you can allow any clients with static IP addresses outbound access to the new Internet links by changing their default gateway to the LAN IP address of the Barracuda Link Balancer. Your Barracuda Link Balancer should be ready for operation. Please refer to the next chapter, Configuring the Barracuda Link Balancer on page 21, for more configuration options. 20 Barracuda Link Balancer Administrator s Guide