You can use
the Deployment Wizard to configure the basic
settings for Transparent HA mode on your Deep Discovery Web
Inspector appliances. Transparent HA mode
is a two-node solution. Perform the following procedure on each node.
Prerequisite: Deep Discovery Director IntegrationConfiguration and policy settings are
synchronized between the two Deep Discovery Web
Inspector HA nodes. This synchronization is not implemented by the Deep Discovery Web
Inspector itself, but by the
Deep Discovery Director appliance to which the Deep Discovery Web
Inspector nodes are
registered. The synchronization is accomplished by configuring the Deep Discovery Director synchronization scheduling
task.
Therefore, to implement a Transparent HA
mode deployment, you must integrate and register each of the Deep Discovery Web
Inspector HA nodes to Deep Discovery Director.
Prerequisite When Using LACP Trunk LinksAs part of the
configuration, you can enable LACP and use trunked interfaces for data ingress and
data egress. To deploy LACP link aggregation for Transparent HA mode, the appliance
must be equipped with two bypass cards. You must configure the connected switches
with the corresponding LACP configuration.
You can exit the Deployment Wizard at any
time by clicking on another menu item in the management console. If you exit the
wizard before finishing the configuration process, all data entered will be
lost.
Procedure
- Go to .The Welcome page opens.
- In the Deployment Mode section, select Transparent HA.
- Click Next.
- In the Working Mode
Settings page, specify the following:OptionDescriptionHTTP portScan for HTTP traffic on this port. Default is 80.HTTPS portScan for HTTPS traffic on this port. Default is 443. Allow the port to be empty to bypass https traffic.
- Click Next.
- In the Network page, specify the following details:OptionDescriptionHost nameSpecify a host name.Primary DNS serverSpecify the IP address of the DNS server. This is a required setting.Secondary DNS serverOptionally, specify the IP address for a secondary DNS server.Enable LACPSelect if using LACP to aggregate network bandwidth.Interfaces eth4/eth6 and eth5/eth7 will be teamed to become team0 and team1 respectively.
Note
This field is visible only the appliance is equipped with two bypass cards. The eth4-eth7 ports must be connected to a switch with LACP enabled. Additionally, the switch ports connected to eth4/eth6 must be teamed and the switch ports connected to eth5/eth7 must be teamed.LACP bond interfaceThis option is visible only if LACP is enabled.A read-only field, preset to eth4/eth5/eth6/eth7.Data ingress / egress interfaceSpecify the data ingress/egress interface.-
LACP not enabled: Field is pre-set to eth4/eth5
-
LACP enabled: Field is pre-set to team0/team1
Data interfaceThis is a read-only field and is pre-set to br0.Enable VLAN IDSelect whether to enable the VLAN tag for the data interface and enter the VLAN ID number (1-4094).IPv4 address, IPv4 mask, and IPv4 gatewaySpecify the IPv4 network settings for the br0 data interface.Management interfaceThis is a read-only field and is pre-set to eth0.ModeThis is a read-only field and is pre-set to static.IPv4 address, IPv4 mask, and Default IPv4 gatewaySpecify the IPv4 network settings for the management interface. -
- Click Next.The Time page opens.
- In the Time section,
configure the time and location settings for the Deep Discovery Web
Inspector appliance.OptionDescriptionNTP serverEnter the NTP server IP address.System time zoneSet the appropriate time zone by selecting the location closest to the Deep Discovery Web Inspector appliance.Optionally, instead of selecting a location, you can select
Etc
and then choose the offset that matches the location closest to the Deep Discovery Web Inspector appliance. - Click Next.The Summary page opens.
- Review and verify the settings and then perform the
appropriate action:
- If the settings are not as desired, click on Previous and modify settings as required.
- If the settings are verified, click on
Done to save the configuration.
Note
After you click Done, a dialog box opens asking if you want to reboot the appliance. After you click OK, the connection to the appliance disconnects and the appliance reboots. After the appliance restarts, the Log On page is displayed.If you do not want to reboot, you can click Cancel instead of OK. If you click Cancel, the Summary page reopens.
Important
If you exit the wizard before saving settings, the configuration is not saved.
What to do next
Configure synchronization between the two Deep Discovery Web
Inspector nodes on the Deep Discovery Director appliance to which Deep Discovery Web
Inspector is registered. The
synchronization is accomplished by configuring the Deep Discovery Director synchronization scheduling
task.
Please refer to the Deep Discovery Director
documentation for procedures about configuring synchronization.