AhnLab TrusGuard, Руководство по установке

Страница: 67 / 120

3
Chapter3 Installation 67

add_llcf: Sets LLCF port group.

del_llcf: Disables LLCF port group.

get_llcf_status: Displays LLCF port group connection status.

get_llcf_support: Displays network port that supports LLCF.
Set Bridge: Active-Standby HA
The following requirements must be met before implementing Active-Standby HA using bridge
interface.

The upper router and bottom switch must be the same L2 sub-network.

The upper/lower router and switch must use STP.

The bridge interface must set STP.

Route bridge is selected using STP, so you do not need to set the monitoring port when setting HA
(A virtual IP address is not needed).

All the hosts in the bottom will use the IP address of the upper router as the gateway.

To use NAT, get an IP address for the bridge, or use a secondary port with the same IP address.
Set Bridge: Active-Active HA
The following requirements must be met before implementing Active-Active HA using bridge
interface.

OSPF or RIP must be used in the upper/lower router.

When setting OSPF or RIP in TrusGuard, use the upper router’s IP address and bottom L3 switch’s IP
address.

The bottom switch must support L3.

The bridge section and section connected to the bottom switch must use a different sub-network.

All the hosts in the borrom must use the bottom switch's IP addrss as the gateway.

Routing is performed using routing protocol, so you do not need to set the monitoring port when
setting HA (A virtual IP address is not needed).

To use NAT, get an IP address for the bridge, or use a secondary port with the same IP address.