Allot NetEnforcer AC-1000 Series, Hardware Manual

Page: 80 / 97

Chapter 4: Redundancy
NetEnforcer AC-1000 Hardware Guide
4-16
To connect two AC-1000 Series NetEnforcers in Parallel Redundancy:
Before using NetEnforcers in Parallel Redundancy mode, make sure that the
configuration of both NetEnforcers is identical; except for their IP addresses, which
must be unique for each unit.
After ensuring identical configuration, test each NetEnforcer (while connected to the
network as a single device) and verify that they are operating identically to one another.
1.
Configure redundancy in both NetEnforcers as outlined in Enabling Redundancy
on p. 4-1.
2.
Designate one of your NetEnforcers to be the default Primary, and connect the
end of the Backup cable to the Backup connector of the NetEnforcer.
3.
Connect the other end of the backup cable to the Primary connector of the Bypass
Unit.
4.
Designate the other NetEnforcer to be the Secondary and connect one end of the
Backup cable to the Backup connector of the Secondary NetEnforcer.
5.
Connect the other end of the Backup cable to the Secondary connector of the
Bypass Unit.
6.
Ensure that the status indicators of both systems are indicating that the systems
are configured correctly, as follows:
•
The
Active
LED of the Primary NetEnforcer is ON.
•
The
Standby
LED of the Primary NetEnforcer is OFF.
•
The
Active
LED of the Secondary NetEnforcer is OFF.
•
The
Standby
LED of the Secondary NetEnforcer is ON.
CAUTION When two NetEnforcers are connected in Redundancy mode with a
switch on each interface, if the Primary NetEnforcer fails and the
Secondary system takes control of traffic, the redundant unit may
take some time to activate. This is normal switch behavior. The
switch will continue to redirect packets to the Primary NetEnforcer,
instead of to the Secondary NetEnforcer.