How to setup SMA1000 Appliances behind Load balancer.

How to setup SMA1000 Appliances behind Load balancer

Problem/Query:

How to setup SMA1000  Appliances behind Load balancer

Resolution/Answer:

• Users Access could be distributed accross devices.
• Support more users.
• Load distribution.
• Redundancy
• SMA appliances can be clustered up to eight appliances using an external load balancer.
• This feature is not intended to provide high availability.
• Administrators can use third- party global load balancers such as F5, Cisco, and RadWare.

Important configurations to remember while setting up SMA appliances behind load balancer:

 You can configure the E-Class SRA appliance to use either a single-homed or dual- homed configuration.

 Configure the SSL certificate to contain the load balancer' s virtual IP address or host name (not the host name or address for the individual appliance)

  Set the default external gateway on the appliance(s) to the IP address of the load balancer or switch connected to load balancer

To check the appliance status, we may need to create health check monitors for the following on external load balancer:-

•  Workplace service which runs on the external interface of the appliance using https port 443
•  AMC Service which runs on the internal Interface of the appliance using port 8443.
•  Any SNMP based monitors (using Aventail MIBs) in order to perform Health check monitoring. 

SMA1000 Supports Load Balancing and Failover operations by Implementing SonicWall SMA1000 Product Using CMS/GTO based deployment.