D-Link DFL-2500 User Guide - Page 328
Things to Keep in Mind
View all D-Link DFL-2500 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 328 highlights
29.4. Things to Keep in Mind 309 Note All Ethernet and VLAN interfaces will have to be assigned a private IP address when the firewall is configured to be a HA member. However, in this example we only showed how to configure the LAN and WAN interfaces. Note that it is possible to use the same HA IP4 Address Pair object on multiple interfaces. When a modification of the configuration on either of the firewalls has been saved and activated, the configuration will automatically be transferred to the other cluster member. It doesn't matter if the configuration was changed on the master or slave firewall, as the cluster member with the highest configuration version number will always try to transfer the configuration to the other cluster member. 29.4 Things to Keep in Mind This section includes the following topics: • Statistics and Logging Issues • Configuration Issues Even though your high availability cluster will behave like a single firewall from most aspects, there are a few things to keep in mind when managing and configuring it. 29.4.1 Statistics and Logging Issues SNMP Statistics SNMP statistics are not shared. SNMP managers have no failover capabilities. Thus, you will need to poll both firewalls in the cluster. Logs come from two firewalls Log data will be coming from two firewalls. This means that you will have to configure your log receiver to receive logs from both firewalls. It also means that all your log queries will likely have to include both firewalls as sources, which will give you all the log data in one result view. Normally, the inactive firewall won't be sending log entries about live traffic, so the output will likely look much the way it did with only one firewall. D-Link Firewalls User's Guide