IBM DataPower Gateway Virtual Edition can be deployed on SoftLayer and used as the public entry point to your service allowing your backend servers to be on private networks. The following shows one method to configure the DataPower ethernet interfaces in this environment. You need to deploy DataPower to a supported hypervisor on a bare metal instance. The following instructions were done using VMWare ESXi 5.5 using DataPower version XI52.7.0.0.8. This setup also assumes you are setting static IPv4 addresses. Three interfaces were configured in the virtual machines settings (private, public, private): On SoftLayer you need to order subnets of type “portable” to assign to your DataPower appliance. This setup used two private subnets (one for the management interface and one for the backend servers), and one portable public subnet.

Buy a IBM WebSphere DataPower Integration Appliance XI52 Virtual Edition - Softwa or other Windows Network Software at CDW. Fps Creator X9 Model Pack 53 Download Free. com.

Management interface (eth0): You need to configure static routes for the softlayer VPN. Depending on which datacenter(s) you VPN into you can set more specific routes. (More info here: ) Configure with WebGUI: Configure with SSH Service: xi52# config Global configuration mode xi52(config)# int eth0 Modify Ethernet Interface configuration xi52(config ethernet eth0)# ip-address 10.125.109.140/27 xi52(config ethernet eth0)# ip-route 10.1.0.0/16 10.125.109.129 0 xi52(config ethernet eth0)# ip-route 10.2.0.0/16 10.125.109.129 0 xi52(config ethernet eth0)# ip-route 10.3.0.0/16 10.125.109.129 0 xi52(config ethernet eth0)# exit Public interface (eth1): A networking rule is to only set one default gateway. Set that on the public interface. Configure with WebGUI: Configure with SSH Service: xi52# config Global configuration mode xi52(config)# int eth1 Modify Ethernet Interface configuration xi52(config ethernet eth1)# ip-address 169.54.60.11/28 xi52(config ethernet eth1)# ipv4-default-gateway 169.54.60.1 xi52(config ethernet eth1)# exit Private interface (eth2): Set a static route for all private traffic to go over this interface.

(The more specific routes will take precedence for the management interface.) Configure with WebGUI: Configure with SSH Service: xi52# config Global configuration mode xi52(config)# int eth2 Modify Ethernet Interface configuration xi52(config ethernet eth2)# ip-address 10.126.109.141/27 xi52(config ethernet eth2)# ip-route 10.0.0.0/8 10.126.109.129 0 xi52(config ethernet eth2)# exit Test your network connectivity: Check your configuration from the SSH service with show ethernet You should be able to ping each of your interfaces. (You need to be connected to the SL VPN to ping the private interfaces) Also from WebGUI or SSH service you can ping your backend systems.

Failover: To configure a second DataPower in an active/passive setup you need a third public IP in the same subnet. On the interface with the public IP, enable the standby control and set the IP and priority. On the passive DataPower set the priority to a lower number. To force the DataPower to failover to the secondary (so you can do maintenance on the primary), disable the public interface on the primary.