
513
High availability and load balancing using clusters
Creating a new cluster with the Cluster Wizard
3
In the Define Cluster panel, do the following:
4
Click
Next
.
5
In the Cluster VIP Addresses panel, do the following:
■
In the Interface table, select an interface.
■
In the VIP address text box, type the remainder of the Virtual IP address (VIP) to associate
with the interface, and then click
Add
.
Repeat this step for each interface. Do not add a VIP to the heartbeat interface.
The VIP address represents the identity of the cluster to outside computers and routes.
You may assign up to a total of 64 VIPs minus the number of network segments that
participate in the cluster. However, there is no benefit to assigning more VIPs than there are
cluster members. You must enter a VIP address for each interface, excluding the heartbeat
interface.
Do not use a VIP to launch the SGMI. Always use an actual IP address.
6
Click
Next
.
7
In the Add Cluster Member panel, in the IP address text box, type the IP address of the security
gateway you want to add to the cluster.
8
Click
Next
.
Cluster name
Type the name for the cluster.
The maximum length is 256 characters.
Allowed characters are a-z, A-Z, numerals, periods (.), and dashes (-).
Do not include spaces or underscores in the name. The characters @,!,#,$,%,^,&,*,<,>, _
and other reserved characters are also invalid.
Cluster description
Type a brief description of the type of cluster you are creating.
This description is used to identify the type and intent of the cluster.
Heartbeat interface
Select a dedicated private network for heartbeat communications. Otherwise, use an
inside interface.
A list of active interfaces defined by the System Setup Wizard is listed in the drop-down
menu. If the interface you require, is not listed, cancel out of the this wizard, return to
the System Setup Wizard, and configure the interface that you require. Once you click
Next, you cannot click Back to change the heartbeat interface. You can rerun the Cluster
Wizard to change this setting.
Hot standby
If you want the cluster to be in hot standby mode, select
Hot standby
.
In hot standby mode, only one cluster member is active. One or more other cluster
members are in standby mode for fail-over purposes. If the active member fails, one of
the members that are in standby mode becomes active.
Cluster management negotiates which cluster member is the active member. It is not
necessarily the cluster member from which the configuration is being deployed.
Load balancing
If you want the cluster to use load balancing, select
Load balancing
.
In the Load balancing algorithm drop-down list, select the load balancing algorithm for
the cluster.
The options are:
■
Round Robin
Cluster members are used alternately. Round Robin is the default setting.
■
Least Load
The cluster member with the lowest traffic load is selected.
■
Random
Cluster members are chosen arbitrarily.
Содержание Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series
Страница 76: ...76 Managing administrative access Enabling SSH for command line access to the appliance...
Страница 242: ...242 Defining your security environment Controlling full application inspection of traffic...
Страница 243: ...243 Defining your security environment Controlling full application inspection of traffic...
Страница 269: ...268 Limiting user access Authenticating using Out Of Band Authentication OOBA...
Страница 319: ...318 Controlling traffic at the security gateway Blocking inappropriate content with content filtering...
Страница 373: ...372 Preventing attacks Enabling protection for logical network interfaces...
Страница 409: ...408 Providing remote access using VPN tunnels Multicast traffic through gateway to gateway IPsec tunnels...
Страница 509: ...508 Generating reports Upgrade reports...
Страница 553: ...552 Advanced system settings Configuring advanced options...
Страница 557: ...556 SSL server certificate management Installing a signed certificate...
Страница 861: ...860 Index...