High Availability
Issue 4 May 2005 221
High Availability
This tab provides access to the High Availability (HA) functions for the security gateway
including enabling high availability, setting the public and private virtual addresses, adding
security gateway members to the HA group, viewing the status of the HA group, converting a
passive member to an active member, configuring member VSUs, the VRRP advertisement
interval, version number, third party reference points for the public and pri vate interfaces, and
minimum connectivity to reference hosts.
This feature provides a fault tolerant infrastructure that minimiz es the downti me of the protected
network. Fault tolerant infrastructure is achieved by pairing two like VSUs together to form a HA
group. The HA group is comprised of a primary or active security gateway and secondary or
passive security gateway. Only one instance of the securi ty gateway is visible in the security
gateway contents list. The active security gateway is listed with the passive security gateway
visible in the Members pane of the Hi gh Availability tab. Because configuratio n within the HA
group is identical, only the primary security gateway of the HA group is displayed.
Figure 72: High Availability
Preparing devices for high availability (VPNos 3.x)
This check box is used to prepare devices running VPNos 3.x for high availability (HA). Use this
check box after you have confirmed the public and private VSUs in the HA group have been
configured to deny all non-VPN traffic. Beginning with VPNmanager 3.2, Deny all Non-VPN
Traffic is the default selection.
For additional information about configuring the security gateway to deny all non-VPN traffic
through the security gateway console, refer to Preparing the security gate way for Configuration,
of the security gateway User’s Guide.
For additional information on how to configure the security gateway to deny all non-VPN traffic
through the initial security ga teway Quick Setup, refer to the Configuring a security gateway.