Configuring High Availability; C Onfiguring High Availability - D-Link NetDefend DFL-CP310 User Manual

Configuring High Availability

You can create a High Availability (HA) cluster consisting of two or more
NetDefend firew alls
network, one a cting
network t raffic is routed, and one acting as the "Backup". If the Master fails, the
Backup automatical
ensures that your network is consistently protected by a NetDefend firewall and
connected to th e Int
The gateways in a HA cluster each h
network. In addi tion
default gat eway address for the local network. Control of the virtual IP address is
passed as follows:
1. Each gateway is assigned a priority, which determines the gateway's role: the
gateway with the highest priority is the Active Gatew
address, and the rest of the gateways are Passive Gateways.
2. The Active Gateway sends periodic signals, or "heartbeats", to the network via a
synchronization interface.
The synchronization interface ca
gateways except the WLAN.
3. If the heartbeat from the Active Gateway stops (indicating that the
gateway has failed), the gateway with the highest priority become
Active Gateway and takes over the virtual IP a
4. When a gateway that was offline comes back online, or a gatew
changes, the gateway sends a heartbeat notifying the other gateways in the
clu ster.
If the gateway'
The NetDefend firewall supports Internet connection tracking, which means that
each firewall tracks its Internet connection's status and reduces its own priority by a
Chapter 5: Managing Your Network
. For example, you can install two NetDefend firewalls on
as the "Master", the default gatew
ly and transparently takes over all the r
ernet.
, the gateways share a single virtual IP address, which is th
n be any internal network existing on both
s priority is now the highest, it becomes the Active Gateway.
ay through which all
ave a separate IP address
ddress.
Configuring High Availability
oles of the Master. This
within the local
ay and uses the virtual IP
Active
s the new
ay's priority
your
e
119