Table of Contents
Advertisement
The Primary and Secondary security appliances regularly ping this probe IP address. If both
successfully ping the target, no failover occurs. If neither successfully ping the target, no failover
occurs, because it is assumed that the problem is with the target, and not the security appliances.
But, if one security appliance can ping the target but the other cannot, failover occurs to the security
appliance that can ping the target.
The Primary IPv4/v6 Address and Secondary IPv4/v6 Address fields must be configured with
independent IP addresses on a LAN interface, such as X0, (or a WAN interface, such as X1, for
probing on the WAN) to allow logical probing to function correctly.
9. Optionally, to manually specify the virtual MAC address for the interface, select Override Virtual
MAC and enter the MAC address in the field. The format for the MAC address is six pairs of
hexadecimal numbers separated by colons, such as
by default.
IMPORTANT:
configuration errors.
When Enable Virtual MAC is selected on DEVICE | High Availability > Advanced Settings, the
SonicOSX firmware automatically generates a Virtual MAC address for all interfaces. Allowing the
SonicOSX firmware to generate the Virtual MAC address eliminates the possibility of configuration
errors and ensures the uniqueness of the Virtual MAC address, which prevents possible conflicts.
10. Click OK.
11. To configure monitoring on any of the other interfaces, repeat Step 3 through Step 10 for each
interface.
12. When finished with all High Availability configuration, click ACCEPT. All settings are synchronized to
the Secondary unit automatically.
Configuring Multi-Appliance Instance-Level
HA
This configuration assumes an established appliance-to-appliance HA pairing as described in
Unit-to-Unit
HA.
To establish an HA pair of instances residing on different NSsp appliances:
1. First establish unit-to-unit pairing as described in
2. Have at least one dedicated unused physical port connected on both the NSsp HA unit, to be used for
the Multi-instances HA control interface and HA Data interface. Although we recommend two
dedicated unused ports, one for the HA control interface and one for the HA data interface.
3. Upload instance firmware on both primary and secondary appliances. After the firmware is uploaded
successfully on both the primary and secondary units verify that the Running column on the DEVICE |
Instance > Firmware page on the Active unit shows as BOTH.
Care must be taken when choosing the Virtual MAC address to prevent
A1:B2:C3:d4:e5:f6
Setting Up Unit-to-Unit
SonicOSX 7 Getting Started Guide for the NSsp Series
. This option is not selected
Setting Up
HA.
Configuring High Availability
35
Advertisement
Table of Contents
