HP SuperStack Firewall Series Manual do Utilizador Página 142

  • Descarregar
  • Adicionar aos meus manuais
  • Imprimir
Vista de página 141
142 C
HAPTER
10: C
ONFIGURING
H
IGH
A
VAILABILITY
primary Firewall and the backup Firewall then two addresses are
required.
High Availability does not allow the use of dynamic IP address assignment
from your ISP.
Each Firewall in the High Availability pair must have the same
upgrades and subscriptions enabled. If the backup unit does not have
the same upgrades and subscriptions enabled, these functions will not
be supported in the event of a failure of the primary Firewall.
Network
Configuration for
High Availability Pair
The following diagram illustrates the network configuration for a High
Availability pair:
Figure 59
Two Firewalls connected as a High Availability Pair
CAUTION: Do not mix the LAN, DMZ and WAN networks when
connecting the Firewalls together as this will compromise the security of
your network.
All Firewall ports being used must be connected together with a hub or
switch. Each Firewall must have a unique LAN IP Address on the same
LAN subnet. If each Firewall has a unique WAN IP Address for remote
management, the WAN IP Addresses must be in the same subnet.
The two Firewalls in the High Availability pair will send heartbeatsover
the LAN network segment. The High Availability feature will not function
if the LAN ports are not connected together.
Configuring High
Availability
Configuring a High Availability pair of Firewalls consists of two steps:
Configuring High Availability on the Primary Firewall
F2
S
S
S
F
S
S
S
F1
Primary Firewall
Backup Firewall
Connecting Switches
DUA1611-0AAA02.book Page 142 Thursday, August 2, 2001 4:01 PM
Vista de página 141
1 2 ... 137 138 139 140 141 142 143 144 145 146 147 ... 213 214

Comentários a estes Manuais

Sem comentários