This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Configuring Active-Active

Looking to implement an Active-Active solution. I have one Astaro firewall running v7.011 and is working fine, which has a HA licence installed already.

I have a duplicate machine with same hardware as first firewall, which I want to create a Active-Active system.

I have read through the instructions for creating a Active-Active cluster, but not sure on the steps I need to take to create Active-Active cluster

1. Install v7.011 on 2nd firewall
2. Import licence file onto 2nd firewall
3. Link both systems using x-over cable using same network card eth numbers
4. Setup 2nd firewall with same network connections as 1st firewall
5. On the 1st firewall, choose Cluster on high availablilty mode
6. Choose sync nic, that I have linked by x-over cable
7. Enter device name, device ID, encryption key and choose auto join.

Once I have done these steps, does the 1st firewall send its config to 2nd firewall and setup the Active-Active link?

Have I missed anything?

Tried reading through the instructions, but I don't think it goes into enough detail.

Thanks
Scott

This thread was automatically locked due to age.

0 jjohnston62 over 18 years ago

I'm actually in the process of doing this now for someone.

There is a HA/Cluster guide for v7 in the knowledge base at www.astaro.com/support. Did you look at this yet? Is that what you've looked at?
Cancel
Vote Up 0 Vote Down

Cancel
0 supps over 18 years ago in reply to jjohnston62

Yes, there is a PDF and HTML page about clustering, but it seems to jump between talking about appliances and the software version and doesn't give you any clear steps on what you need to do on the 2nd firewall.

I feel that the HA on Astaro was a after thought as once you have the Active-Active running, it makes both boxes into one!
Cancel
Vote Up 0 Vote Down

Cancel
0 ClausP over 18 years ago

-> http://portal.knowledgebase.net/article.asp?article=235572&p=5956
Cancel
Vote Up 0 Vote Down

Cancel
0 supps over 18 years ago in reply to ClausP

Thanks, the web link is a new document I have never seen before.

Looks like it goes into a bit more detail.

Thanks
Scott
Cancel
Vote Up 0 Vote Down

Cancel
0 supps over 18 years ago in reply to ClausP

I have read through the web link, but it doesn't talk about the licence for the 2nd firewall.

Do you need to install the licence on the 2nd firewall before you conifgure the master?
Cancel
Vote Up 0 Vote Down

Cancel
0 ClausP over 18 years ago in reply to supps

I have read through the web link, but it doesn't talk about the licence for the 2nd firewall.

See chapter 3 / p. 3 in the doc mentioned above ! [;)]
Do you need to install the licence on the 2nd firewall before you configure the master?

Only when the 2nd firewall should be the master and it is not an asg appliance...
Cancel
Vote Up 0 Vote Down

Cancel
0 supps over 18 years ago in reply to ClausP

Not having much luck in getting Active-Active to work.

When I join the 2nd firewall, I can see Activity in the 1st firewall HA log saying it has found node 2, but then nothing happens!

2007:10:17-17:39:20 (none) ha_daemon[1571]: id="38A0" severity="info" sys="System" sub="ha" name="Node 2 joined cluster"
2007:10:17-17:40:11 (none) ha_daemon[1571]: id="38A0" severity="info" sys="System" sub="ha" name="Access granted to remote node 2!"

The first firewall says only 1 node connected.

Any ideas?
Cancel
Vote Up 0 Vote Down

Cancel
0 Gert Hansen over 18 years ago in reply to supps

Hi there,

you only need to join the 2nd device to the cluster.
From that point on, the cluster act's as one system.
You also have only one gui, it will always point to the active master device.

The license, the configuration, the log file and the reporting is synchronized automatically.
Also updateing is now done automatically,

What does the Management HA/Cluster Table show you?

regards
Gert
Cancel
Vote Up 0 Vote Down

Cancel
0 supps over 18 years ago in reply to Gert Hansen

The cluster table shows only 1 node. (I was expecting it to show two?)
Cancel
Vote Up 0 Vote Down

Cancel