
Failover
1. Configure VLANs and Subnets as described in "Configuring Subnets" on page 103. It is important that both
the VLANs are identical in both the preferred primary and the backup.
2. Access the CLI as described in "Starting the CLI" on page 128.
3. Configure the failover service parameters for the preferred primary equalizer:
Enter:
eqcli > vlan vlname subnet sname flags flagname
Where vlname is the name of the VLAN, sname is the name of the subnet and flagname is
the name of the flag.
The Command flag designates this subnet as the subnet over which the configuration file
transfers (between preferred primary and preferred backup) can occur.
The Heartbeat flag allows the failover peers to probe one another over the subnet. At least
one subnet must have a Heartbeat flag enabled.
The def_src_addr flag indicates that this subnet is to be used for the default equalizer source
IP.
4. Enter:
eqcli > vlan vlname subnet sname flags flagnam
Where vlname is the name of the VLAN, sname is the name of the subnet and flagname is
the name of the flag. These flags enable the System Services for the Failover IP Address
allow services that will be available:
a. fo_http - when enabled the Equalizerwill listen for http connections on the Failover IP
address on the subnet.
When configuring a Failover IP address on a subnet on Equalizer, make absolutely sure that
no other system on the network is using that Failover IP address other than the Equalizers
configured into failover.
If the IP address IS used by another system on the net, and a failover occurs, BOTH of the
failover peers will transition to and remain in BACKUP mode! The way to fix the problem is
to:
1. Remove the duplicate IP address from the offending system.
2. Reboot one of the peers.
The peers should transition to their proper failover modes.
This applies to both Active/Passive and Active/Active failover.
440
Copyright © 2013 Coyote Point Systems. A subsidiary of Fortinet, Inc.
Kommentare zu diesen Handbüchern