So, I am preparing a "Sophos UTM Highlights" presentation/workshop for one potential client who are looking for a solution for TMG replacement. I am planning to present some features in VM environment on my laptop, and one of the topic will be UTM HA capabilities. I've tried it with Oracle Virtualbox and VmWare Workstation 10.0 with no luck. Oracle Vbox: All NICs bridged to physical, Promiscuous Mode selected. After configuring first node communication is immediately lost. Ping packets are passing sporadically (scrshot). VMware Workstation: All NICs bridged to physical. First node OK. Second node hangs, after manual reboot hangs on "waiting for STP on eth3". Any advice ?

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Hot-Standby HA in Virtual environment ?

So,

I am preparing a "Sophos UTM Highlights" presentation/workshop for one potential client who are looking for a solution for TMG replacement. I am planning to present some features in VM environment on my laptop, and one of the topic will be UTM HA capabilities.

I've tried it with Oracle Virtualbox and VmWare Workstation 10.0 with no luck.

Oracle Vbox:

All NICs bridged to physical, Promiscuous Mode selected.
After configuring first node communication is immediately lost. Ping packets are passing sporadically (scrshot).

VMware Workstation:

All NICs bridged to physical.
First node OK.
Second node hangs, after manual reboot hangs on "waiting for STP on eth3".

Any advice ?

This thread was automatically locked due to age.

0 vilic over 11 years ago

Another useful thing that I've learned from this experience is that restore from backup (from VM console) does not undo HA configuration (eth3 is up again, and other interfaces still have changed MAC addresses).

Is this expected behavior ?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 11 years ago
What happens if you:
cc set ha advanced virtual_mac 0

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 teched_01 over 11 years ago

Are you saying you have all of the Virtual NICs bridged to the same physical NIC?
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 11 years ago in reply to teched_01

Are you saying you have all of the Virtual NICs bridged to the same physical NIC?

Of course that I tried first with "Host Based" NICs. Since it didn't work I switch them to the bridged physical interface (WiFi - not used).

Found by google-ing that this can help in building Windows NLB clusters in VmWare (in Hyper-V there is a check box "Enable MAC spoofing", and it works), but obviously not with UTM, or this is not the same technology...[:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 11 years ago in reply to BAlfson
What happens if you:
cc set ha advanced virtual_mac 0

It works, thanks...[:)]

Tested it on Oracle Virtualbox with 9.204-20 firmware.
Cancel
Vote Up 0 Vote Down

Cancel