Views:

The following table lists requirements that need to be fulfilled by both active primary appliance and passive primary appliance before the passive primary appliance can be added to the cluster.

Table 1. High Availability Clustering Requirements

Requirement

Description

Hardware model

Must be the same hardware model (1100 or 1200)

Physical connection

Recommended to connect to each other directly using eth3

Important:

When using high availability, eth3 is used to connect the two identical appliances and cannot be used for other purposes (for example, as the management port, external network connection, or as a memeber port in a NIC team).

Note:

  • Deep Discovery Analyzer uses the IPv6 local-link IP address on the eth3 interface for high availability communication.

  • If the active primary appliance is not connected to the passive primary appliance directly (for example, if they are in different data centers), the following requirements must be met:

    • The appliances must be Deep Discovery Analyzer 1100 or 1200

    • The connections between the appliances must meet the following conditions:

      • Network latency is less than 15 ms

      • Packet loss ratio is less than 0.000001%

      • Network bandwidth is greater than 240Mbps

Firmware, hotfix, and patch version

Must be the same

Host name

Must be different

IP addresses

Must be symmetrical:

  • If only IPv4 address is configured on active primary appliance, passive primary appliance cannot configure both IPv4 address and IPv6 address.

  • If IPv4 address and IPv6 address are configured on active primary appliance, passive primary appliance cannot only configure IPv4 address.

Network segment

Must be in the same network segment

Virtual IP address

Must be configured on the active primary appliance

Management port

Must use the same network port

External connection port for Virtual Analyzer

Must use the same network port

NIC teaming

If configured, must use the same NIC teaming ports and connection type

In a high availability cluster, one appliance acts as the active primary appliance, and one acts as the passive primary appliance. The passive primary appliance automatically takes over as the new active primary appliance if the active primary appliance encounters an error and is unable to recover.

Note:

  • If your network has Trend Micro Apex Central, only register the active primary appliance to Apex Central.

  • When using high availability, use the virtual IP address to register.

  1. Perform the installation and deployment tasks as described in the Deep Discovery Analyzer Installation and Deployment Guide.
  2. Configure the passive primary appliance.
    1. On the management console of the passive primary appliance, go to Administration > System Settings and click the Cluster tab.
    2. Select Primary mode (passive).
    3. Type the IPv4 address or IPv6 address of the active primary appliance in Active primary IP address.
    4. Click Test Connection.
    5. Click Save.

      You will be redirected to the appliance standby screen.

  • The passive primary appliance stops processing objects if it was previously doing so.

  • The passive primary appliance will sync all settings from the active primary appliance. The total time to complete syncing depends on the appliance model.

    Important:

    While the appliance is syncing, it cannot:

    • Take over as active primary appliance

    • Switch to another mode

  • The management console of the passive primary appliance cannot be accessed. Manage the appliance and monitor the sync status from the management console of the active primary appliance.

  • After you deploy Deep Discovery Analyzer in a high availibility cluster, you cannot change the settings for the following:

    • NIC teaming

    • Management port

    • External network connection

Parent topic: Cluster Tab