Clustering Over Multiple Subnets; Ip Address Types; Host Ip Address; Management Ip Address (Mip) - Avaya VPN Gateway User Manual

Initial Setup

Clustering Over Multiple Subnets

The SSL VPN software supports clustering over multiple subnets. If more than one VPN
Gateway is required and the VPN Gateway you wish to join to the cluster is installed in a
different subnet, the new AVG must be configured as a slave. Master AVGs cannot exist on
different intranet subnets.
Note:
Clustering support is only applicable to one-armed configuration when a node is configured
as a slave in different subnet.

IP Address Types

When configuring the VPN Gateway you will come across a number of IP address types.
Following are the most commonly used:

Host IP Address

Each VPN Gateway can be assigned one or several host (machine) IP addresses for network
connectivity. You will be asked to enter a host IP address when performing the initial setup.

Management IP Address (MIP)

When you create a new cluster you will be prompted for a Management IP (MIP) address,
which is an IP alias to one of the VPN Gateways in the cluster. The MIP address identifies the
cluster and is used when making configuration changes through Telnet or SSH or when
configuring the system using the Browser-Based Management Interface (BBI). The MIP always
resides on a master VPN Gateway. If the master AVG that currently holds the MIP should fail,
the MIP automatically migrates to a functional master AVG.

Virtual IP Address (VIP)

When the VPN Gateway is used in conjunction with an Application Switch. For example, for
SSL acceleration, the client connects to the VIP on the Application Switch. The VIP is used by
the Application Switch to load balance particular service requests (like HTTP) to other
servers.
38 User Guide
Comments? infodev@avaya.com
April 2013