HP 8/80 Fabric OS Encryption Administrator's Guide v6.4.0 (53-1001864-01, June - Page 133

High Availability (HA) cluster configuration 3 Failover/failback policy configuration Failover/failback policy parameters as outlined in Table 5 can be set for the entire encryption group on the group leader. Use the cryptocfg --set command with the appropriate parameter to set the values for the policy. Policies are automatically propagated to all member nodes in the encryption group. TABLE 5 Group-wide policies Policy name cryptocfg --set parameters Description Failover policy -failbackmode auto | manual Heartbeat misses -hbmisses value Heartbeat timeout -hbtimeout value Sets the failback mode. Valid values for failback mode are: • auto - Enables automatic failback mode. Failback occurs automatically within an HA cluster when an encryption switch or blade that failed earlier has been restored or replaced. Automatic failback mode is enabled by default. • manual - Enables manual failback mode. In this mode, failback must be initiated manually when an encryption switch or blade that failed earlier has been restored or replaced. Sets the number of Heartbeat misses allowed in a node that is part of an encryption group before the node is declared unreachable and the standby takes over. The default value is 3. The range is 1-15 in integer increments only. Sets the time-out value for the Heartbeat in seconds. The default value is 2 seconds. Valid values are integers in the range between 1 and 30 seconds. NOTE: The relationship between -hbmisses and -hbtimeout determines the total amount of time allowed before a node is declared unreachable. If a switch does not sense a heartbeat within the heartbeat timeout value, it is counts as a heartbeat miss. The default values result in a total time of 6 seconds (timeout value of two seconds times three misses). A total time of 6 to 10 seconds is recommended. A smaller value may cause a node to be declared unreachable prematurely, while a larger value could result in inefficiency. Policy Configuration Examples The following examples illustrate the setting of group-wide policy parameters. To set the failback mode to manual failback: SecurityAdmin:switch>cryptocfg --set -failbackmode manual Set failback policy status: Operation Succeeded. To set the Heartbeat misses value to 3: SecurityAdmin:switch>cryptocfg --set -hbmisses 3 Set heartbeat miss status: Operation Succeeded. To set the Heartbeat timeout value to 3 seconds: SecurityAdmin:switch>cryptocfg --set -hbtimeout 3 Set heartbeat timeout status: Operation Succeeded. Fabric OS Encryption Administrator's Guide 115 53-1001864-01