Table of Contents
Advertisement
!
!
!
!
!
Other Considerations
!
!
!
!
!
!
Voyager Reference Guide
multicast MAC addresses. You can avoid this requirement by adding
a static ARP entry to each host that includes the cluster IP address
and multicast MAC address of the internal cluster interface.
If you use multicast mode, the switches connected to the cluster nodes
must be able to forward packets destined for a single (multicast) MAC
address out multiple switch ports simultaneously. Many switches do this
by default.
If you use a two-node cluster, use switches (recommended) or hubs to
connect the cluster protocol networks. This will ensure proper failover in
the event that one of the nodes drops out of the cluster. Do not directly
connect the cluster protocol interfaces using a crossover cable.
For performance purposes, Nokia recommends that you do not use hubs
to connect a cluster to user data networks. If possible, use switches for
these connections.
You can create multiple clusters in the same LAN or VLAN (broadcast
domain). The clusters are distinguished by their cluster IDs.
For an example of how to create a fully redundant topology around an
IPSO cluster, see
"Redundant Topology Examples."
If a cluster will be in service as soon as it is activated, you should
configure and enable VPN-1/FireWall-1 on each node before they
become part of the cluster.
Transparent mode is not supported on cluster nodes.
Router services are not supported, with the exception of NTP.
An IPSO system cannot participate in more than one cluster at one time.
IPSO clusters support:
Multiple internal and external network connections
!
!
10/100 mb or gigabit Ethernet LAN connections
The primary and secondary cluster protocol networks should have
bandwidth of at least 100 mbps.
353
Advertisement
Table of Contents
