SMB SSL-VPN: Configuring High Availability on SRA Virtual Appliance

03/26/2020 31 13684

DESCRIPTION:
SMB SSL-VPN: Configuring High Availability on SRA Virtual Appliance

RESOLUTION:

Feature/Application:

High Availability allows two identical SRA appliances or virtual appliances to provide a reliable, continuous connection to the public Internet. The two SRA appliances are deployed at the same time and connected together, and are called a High Availability Pair (HA Pair).

Procedure:

The High Availability > Settings page provides settings for configuring High Availability.

To enable High Availability for a Virtual Machine and configure the options in the High Availability Settings section, perform the following steps:

Step 1: In a browser, log in to the primary unit and navigate to the High Availability > Settings page.

Step 2: Select the Enable High Availability check box. The HA interface can only be set when the unit is in the HA unconnected mode, and both units must be set to the same interface.

Step 3: Select the Primary Appliance check box if this Virtual Machine is the primary appliance in the HA pair.Step 2: Select the Enable High Availability check box. The HA interface can only be set when the unit is in the HA unconnected mode, and both units must be set to the same interface.

Step 4: Select the High Availability Interface from the drop-down list. The HA interface can only be set when the unit is in the HA unconnected mode, and the interface must be set to the same interface on both units.

Step 5: Enter a number of milliseconds for the Heartbeat Interval. The heartbeat is used to test the connectivity between the primary and backup devices. The heartbeat interval controls how often the two units communicate. The minimum is 500 milliseconds (a half second), and the maximum is 300,000 milliseconds (5 minutes).

Step 6: Enter a value for the Failover Trigger Level. This is the number of heartbeats that must be missed before failover occurs. The minimum is 4, and the maximum is 99.

Step 7: Click Accept.

Step 8: In the browser, open a new tab and point it to the IP address of the backup unit. Log in to the backup.

Step 9: Configure High Availability on the backup unit. When you click the Accept button, the backup device will become IDLE and you will no longer be able to access it with its IP address. The primary device is now Active with the same settings it had before the HA configuration.

The appliances in the HA Pair immediately begin to synchronize data from the primary to the backup unit. When failover occurs and the primary is down, the backup unit will become Active with the same settings as the primary.