Setting Up A High Availability Cluster - D-Link DFL-1100 User Manual

Setting up a High Availability cluster

First of all, each of the DFL-1100 Firewalls must be setup so far that one can manage
them over the web interface. In this example the two units are configured as follow, the
master DFL-1100 will be configured with 192.168.1.2 on its internal interface, and the slave
DFL-1100 with 192.168.1.3. Later when the setup of the HA is done, the virtual or shared IP
will be 192.168.1.1 on the LAN, this is the IP that clients on that network will use as gateway.
When both units are configured with the two individual IP's they should be connected with
a crossover cable between the fourth interfaces on each unit, this interface (ETH4) will no
longer be possible to use as an extra DMZ or LAN interface when running HA.
Login to the master firewall and click on System in the menu bar, and then click HA below
it; in this screen you will click on Configure additional HA parameters. This will show the
screen below; here you will fill in each Units own IP and the shared IP on each interface. This
Unit means the master firewall, the one you should be configuring at the moment. Other Unit
is the slave firewall, the other DFL-1100.
You also need to configure the Cluster ID of the cluster, this have to be a number between
0 and 63, which must be the same on both firewalls in the cluster. This must be unique on
your LAN if you are running more then one cluster.
When this is done you should click on Apply.
28