D-Link DFL-2500 User Guide - Page 326
Planning the High Availability cluster, Creating a High Availability cluster
View all D-Link DFL-2500 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 326 highlights
29.3. Setting up a High Availability Cluster 307 The topics below describe the operations required to setup a complete High Availability cluster. 29.3.1 Planning the High Availability cluster As an example throughout this guide, two D-Link Firewalls are used as cluster members. To simplify this guide, only two of the interfaces on each cluster member are used for network traffic. The following setup is used: • The LAN interfaces on the cluster members are both connected to the same switch. This switch resides on an internal network with IP addresses from the 192.168.10.0/24 network. • The WAN interfaces on the cluster members are both connected to a second switch. This switch resides on an external network with IP addresses from the 10.4.10.0/24 network. • The IP addresses for the interfaces are designated as indicated by this table: Interface Shared IP address Master IP address Slave IP address LAN 192.168.10.1 192.168.10.2 192.168.10.3 WAN 10.4.10.1 10.4.10.2 10.4.10.3 • The DMZ interfaces on the cluster members are used for state synchronization, and therefore connected to each other using a crossover Ethernet cable. 29.3.2 Creating a High Availability cluster Example: Configuring the Firewall as a Cluster Member Each firewall in the cluster will have to be configured to act as either a HA master or slave. This includes configuration of private (master and slave) and shared IP addresses on interfaces, as well as selecting a cluster ID and synchronization interface. D-Link Firewalls User's Guide