Planning The High Availability Cluster; Creating A High Availability Cluster - D-Link DFL-1600 User Manual

29.3. Setting up a High Availability Cluster
The topics below describe the operations required to setup a complete High
Availability cluster.
29.3.1

Planning the High Availability cluster

As an example throughout this guide, two D-Link Firewalls are used as
cluster members. To simplify this guide, only two of the interfaces on each
cluster member are used for network traffic. The following setup is used:
The LAN interfaces on the cluster members are both connected to the
same switch. This switch resides on an internal network with IP
addresses from the 192.168.10.0/24 network.
The WAN interfaces on the cluster members are both connected to a
second switch. This switch resides on an external network with IP
addresses from the 10.4.10.0/24 network.
The IP addresses for the interfaces are designated as indicated by this
table:
Interface Shared IP address Master IP address Slave IP address
LAN 192.168.10.1
WAN
The DMZ interfaces on the cluster members are used for state
synchronization, and therefore connected to each other using a
crossover Ethernet cable.
29.3.2

Creating a High Availability cluster

Example:
Each firewall in the cluster will have to be configured to act as either a HA
master or slave. This includes configuration of private (master and slave)
and shared IP addresses on interfaces, as well as selecting a cluster ID and
synchronization interface.
10.4.10.1
Configuring the Firewall as a Cluster Member
D-Link Firewalls User's Guide
192.168.10.2
10.4.10.2
307
192.168.10.3
10.4.10.3