Views:
The following table lists requirements that need to be fulfilled by both active primary appliance and passive primary appliance before the passive primary appliance can be added to the cluster.

High Availability Clustering Requirements

Requirement
Description
Hardware model
Must be the same hardware model (1100 or 1200)
Physical connection
Recommended to connect to each other directly using eth3
Important
Important
When using high availability, eth3 is used to connect the two identical appliances and cannot be used for other purposes (for example, as the management port, external network connection, or as a memeber port in a NIC team).
Note
Note
  • Deep Discovery Analyzer uses the IPv6 local-link IP address on the eth3 interface for high availability communication.
  • If the active primary appliance is not connected to the passive primary appliance directly (for example, if they are in different data centers), the following requirements must be met:
    • The appliances must be Deep Discovery Analyzer 1100, 1200, or 1300.
    • The connections between the appliances must meet the following conditions:
      • Network latency is less than 15 ms
      • Packet loss ratio is less than 0.000001%
      • Network bandwidth is greater than 240Mbps
Firmware, hotfix, and patch version
Must be the same
Host name
Must be different
IP addresses
Must be symmetrical:
  • If only IPv4 address is configured on active primary appliance, passive primary appliance cannot configure both IPv4 address and IPv6 address.
  • If IPv4 address and IPv6 address are configured on active primary appliance, passive primary appliance cannot only configure IPv4 address.
Network segment
Must be in the same network segment
Virtual IP address
Must be configured on the active primary appliance
Management port
Must use the same network port
External connection port for Virtual Analyzer
Must use the same network port
NIC teaming
If configured, must use the same NIC teaming ports and connection type
In a high availability cluster, one appliance acts as the active primary appliance, and one acts as the passive primary appliance. The passive primary appliance automatically takes over as the new active primary appliance if the active primary appliance encounters an error and is unable to recover.
Note
Note
  • If your network has Trend Micro Apex Central, only register the active primary appliance to Apex Central.
  • When using high availability, use the virtual IP address to register.

Procedure

  1. Perform the installation and deployment tasks as described in the Deep Discovery Analyzer Installation and Deployment Guide.
  2. Configure the passive primary appliance.
    1. On the management console of the passive primary appliance, go to AdministrationSystem Settings and click the Cluster tab.
    2. Select Primary mode (passive).
    3. Type the IPv4 address or IPv6 address of the active primary appliance in Active primary IP address.
    4. Click Test Connection.
    5. Click Save.
      You will be redirected to the appliance standby screen.
  • The passive primary appliance stops processing objects if it was previously doing so.
  • The passive primary appliance will sync all settings from the active primary appliance. The total time to complete syncing depends on the appliance model.
    Important
    Important
    While the appliance is syncing, it cannot:
    • Take over as active primary appliance
    • Switch to another mode
  • The management console of the passive primary appliance cannot be accessed. Manage the appliance and monitor the sync status from the management console of the active primary appliance.
  • After you deploy Deep Discovery Analyzer in a high availibility cluster, you cannot change the settings for the following:
    • NIC teaming
    • Management port
    • External network connection