Riverbed SteelHead 3070-SD, Руководство пользователя

Страница: 94 / 124

94 | Configuring High Availability on SteelHead SD
Prerequisites
Failure conditions
SteelHead SD supports appliance, uplink, LAN, and dedicated port failure conditions. This list describes
some typical use cases:
• Appliance failure - For failures due to power, hardware, or VM failures, the master role is moved to
the peer appliance. The VIP is moved to the new master appliance and L3 advertisements are
stopped from the previous master appliance.
• LAN failure - For an L2 LAN failure, the VIP moves to the backup appliance and MPLS connectivity is
withdrawn. Traffic is sent through the backup appliance. For an L3 LAN failure, routing converges to
send traffic to the backup appliance. Traffic is moved between appliances through the AUX port
depending on which uplink the traffic needs to exit the HA pair.
• AUX port failure - For an AUX port failure, you can configure a LAN-side HA standby link to avoid a
split-brain scenarios if the AUX link goes down. The standby LAN HA link also provides connectivity
via the LAN to SCM when a SteelHead SD appliance does not have an internet uplink. With a backup
LAN HA link configured, when the AUX link fails, the HA traffic is switched to the LAN-side link. The
AUX port is still the primary HA link, so that when the AUX link comes back up, traffic is switched
back to the AUX link.
Prerequisites
Before configuring high availability, check these requirements and recommendations:
• Both appliances must be running the same software version.
• Both appliances must be cabled directly on the LAN branch using the AUX port.
• In an L2 deployment, peer appliances must be located in the same zone of the branch network.
• In an L3 deployment, two zones must be created, one for each appliance.
• If you enable a standby LAN link for an AUX link failure, the standby HA LAN link must be part of a
switched domain and a loopback IP address must be configured that is unique across all
organizations.
• If you have two high-availability (HA) appliances that have the same public IP, tunnels with the two
HA appliances can’t be established, as they would appear identical. You must override the AutoVPN
port to ensure tunnels between the two HA sites are established. For details, see
“Overview of
AutoVPN on SteelHead SD” on page 33
Configuring a SteelHead SD HA pair
These tasks assume that you have installed, registered, and performed the initial configuration of the
SteelHead SD HA pair. You should create your branch site where the HA pair will be located, along with
the associated zone and uplinks. For details, see the
SteelConnect Manager User Guide . This section
contains these topics:
• “Configuring the AUX port on the HA pair” on page 95
• “Configuring the LAN zone for the SteelHead SD HA pair” on page 95
• “Assigning the LAN zone to the SteelHead SD HA pair” on page 96