D-Link NetDefend DFL-CP310 User Manual page 136

Configuring High Availability
user-specified amount, if its Inte
Gateway's priority drops below a
becomes the Active Gateway.
Note: You can force a fail-over to a passive NetDefend firewall. You may want to do
this in order to verify that HA is working properly, or if the active NetDefend firewall
needs repairs. To force a fail-over, switch off the primary box or disconnect it from
the LAN network.
The NetDefend firewall supports configuring multiple HA clusters on the same
network segment. To this end, each cluster must be assigned a unique ID number.
When HA is configured, you can specify that only the Active Gateway in the
cluster should connect to the Internet. This is called W
the following situations:
• Your Internet subscription cost is based is on connection time, and
therefore having the Passive appliance needlessly connected to the Internet
costs you money.
• You want multiple appliances to share the same static IP address without
creatin g an IP address conflict.
WAN HA avoids an IP address change, and thereby ensures virtually uninterrupted
access from the Internet to internal servers at your netwo
Before configuring HA, the following requirements m
120
rnet connection goes down. If the Active
nother gateway's priority, then the other gateway
AN HA, and it is useful in
rk.
ust be met:
D-Link NetDefend firewall User Guide