D-Link NetDefend DFL-210 User Manual page 438

11.2. HA Mechanisms
will lose their synchronization with each other. In other words, the inactive unit will no longer have
a correct copy of the state of the active unit. A failover will not occur in this situation since the
inactive unit will realize that synchronization has been lost.
Failure of the sync interface results in the generation of hasync_connection_failed_timeout log
messages by the active unit. However, it should be noted that this log message is also generated
whenever the inactive unit appears to be not working, such as during a software upgrade.
Failure of the sync interface can be confirmed by comparing the output from certain CLI commands
for each unit. The number of connections could be compared with the stats command. If IPsec
tunnels are heavily used, the ipsecglobalstat -verbose command could be used instead and
significant differences in the numbers of IPsec SAs, IKE SAs, active users and IP pool statistics
would indicate a failure to synchronize. If the sync interface is functioning correctly, there may still
be some small differences in the statistics from each cluster unit but these will be minor compared
with the differences seen in the case of failure.
Once the broken sync interface is fixed, perhaps by replacing the connecting cable, synchronization
between active and inactive units will not take place automatically. Instead, the unsynchronized
inactive unit must be restarted after which the following takes place:
• During startup, the inactive unit sends a message to to the active unit to flag that its state has
been initialized and it requires the entire state of the active unit to be sent.
• The active unit then sends a copy of its entire state to the inactive unit.
• The inactive unit then becomes synchronized after which a failover can take place successfully if
there is a system failure.
Note: An inactive unit restart is required for resynchronization
A restart of the inactive unit is the only time when the entire state of the active unit is
sent to the inactive unit and this is the reason why a restart is required for
resynchronization.
438
Chapter 11. High Availability