Create an IPv6 virtual address. This is the address that the clients will be connecting to, and is the name of the failover group: #(config)virtual-ip address <virtul-ipv6-address>
Configure failover on all the ProxySGs participating in the failover group: #(config)failover #(config failover)create <virtual-ipv6-address> #(config failover <virtual-ipv6-address>)
ProxySG failover group will automatically pick a master ProxySG, using the numerically highest local IP address as the default master. It is also possible to force one of the ProxySG to be the master: #(config failover <virtual-ipv6-address>)master
This automatically puts this ProxySG to have the highest failover priority.
It is also possible to create a shared secret between the failover ProxySGs. The secret can be set using the following command: #(config failover <virtual-ipv6-address>) secret <key>
If the users are connecting to the ProxySG explicitly using the virtual IP address, the configuration is complete at this point.However, if the users are connected to the Internet transparently, the system administrator needs toconfigure the bridge: #(config)bridge #(config bridge)edit <bridge-name> #(config bridge <bridge-name>)failover mode serial|parallel
The mode should correspond to the network scenario. If the ProxySGs are deployed in serial mode, setting the bridge in serial mode will result in the packet being forwarded when the ProxySG is in standby mode.By setting it in parallel mode, the bridge will drop the packet when the ProxySG is in standby.
Register this bridge with the failover group created in the previous step: #(config bridge <bridge-name>)failover group <virtual-ipv6-address>
Imported Document ID: 000014410
Subscribing will provide email updates when this Article is updated. Login is required.