Clavister cOS Core Administration Guide

Chapter 11: High Availability
connected to the slave unit in the cluster. The procedure for doing this with each unit is as
follows:
1. Connect to the Clavister Security Gateway through the Web Interface.
2. Go to: Objects > Address Book and create an IP4 HA Address object for each interface pair
in the cluster. Each object will contain the master and slave IP addresses for the interface
pair. Inclusion in an IP4 HA Address object is mandatory for any interface that will be used
for remote management but optional for other interfaces.
3. Save and activate the new configuration before continuing to the next step.
4. Go to System > Device > High Availability in the web interface and press the Start Wizard
button. Running the wizard for the master and slave units is described in A and B below.
5. Save and activate the new configuration.
A. Running the Wizard for Master Setup
1. Specify the NodeType, ClusterID and Interface that will be used for synchronization.
2. If the two hardware models used in the cluster are different, this should also be indicated
(see Section 11.3.5, “Unique Shared Mac Addresses” below for an explanation of this option).
3. Select the shared IP address and, if desired, the individual IP4 HA Address objects created
earlier.
4. The wizard will confirm that master setup is complete.
B. Running the Wizard for Slave Setup
1. Specify the NodeType, ClusterID and Interface that will be used for synchronization.
2. If the two hardware models used in the cluster are different, this should also be indicated
(see Section 11.3.5, “Unique Shared Mac Addresses” below for an explanation of this option).
3. The wizard will acknowledge that it will synchronize with the master unit.
4. Select the desired interface mapping.
5. The wizard will confirm that slave setup and synchronization is complete.
Installing a New Master Unit
It should be noted in the above process that the HA wizard synchronizes the slave from the
master unit and not the other way around. This means that if the slave unit is swapped with a
new unit, perhaps because of an equipment failure, the wizard can be used to perform the initial
setup since it will copy over the configuration from the master.
But what if it is the slave unit that contains the configuration that is to be used and it is the
master unit that is to be synchronized with it? This would be the case if the master unit suffered a
fault and had to be swapped with a brand new unit.
There are two methods to resolve this:
Method A. Copying the slave configuration to the new master
The easiest and quickest way to configure a new master unit is as follows:
661