Clustering Over Multiple Subnets
The SSL VPN software supports clustering over multiple subnets. If more than one VPN
Gateway is required and the VPN Gateway you wish to join to the cluster is installed in a
different subnet, the new AVG must be configured as a slave. Master AVGs cannot exist on
different intranet subnets.
Note:
Clustering support is only applicable to one-armed configuration when a node is configured
as a slave in different subnet.
IP Address Types
When configuring the VPN Gateway you will come across a number of IP address types.
Following are the most commonly used:
Host IP Address
Each VPN Gateway can be assigned one or several host (machine) IP addresses for network
connectivity. You will be asked to enter a host IP address when performing the initial setup.
Management IP Address (MIP)
When you create a new cluster you will be prompted for a Management IP (MIP) address,
which is an IP alias to one of the VPN Gateways in the cluster. The MIP address identifies the
cluster and is used when making configuration changes through Telnet or SSH or when
configuring the system using the Browser-Based Management Interface (BBI). The MIP always
resides on a master VPN Gateway. If the master AVG that currently holds the MIP should fail,
the MIP automatically migrates to a functional master AVG.
Virtual IP Address (VIP)
When the VPN Gateway is used in conjunction with an Application Switch. For example, for
SSL acceleration, the client connects to the VIP on the Application Switch. The VIP is used by
the Application Switch to load balance particular service requests (like HTTP) to other
servers.
Initial Setup
38 User Guide
April 2013
Comments? infodev@avaya.com
Summary of Contents for 3050-VM
Page 1: ...User Guide Avaya VPN Gateway Release 9 0 NN46120 104 Issue 04 04 April 2013 ...
Page 4: ...4 User Guide April 2013 Comments infodev avaya com ...
Page 12: ...12 User Guide April 2013 ...
Page 20: ...New in this release 20 User Guide April 2013 Comments infodev avaya com ...
Page 30: ...Introducing the VPN Gateway 30 User Guide April 2013 Comments infodev avaya com ...
Page 36: ...Introducing the ASA 310 FIPS 36 User Guide April 2013 Comments infodev avaya com ...
Page 74: ...Upgrading the AVG Software 74 User Guide April 2013 Comments infodev avaya com ...
Page 86: ...Managing Users and Groups 86 User Guide April 2013 Comments infodev avaya com ...
Page 130: ...The Command Line Interface 130 User Guide April 2013 Comments infodev avaya com ...
Page 162: ...Supported Ciphers 162 User Guide April 2013 Comments infodev avaya com ...
Page 212: ...Syslog Messages 212 User Guide April 2013 Comments infodev avaya com ...
Page 242: ...Definition of Key Codes 242 User Guide April 2013 Comments infodev avaya com ...
Page 259: ...Creating a Port Forwarder Authenticator User Guide April 2013 259 ...
Page 266: ...Using the Port Forwarder API 266 User Guide April 2013 Comments infodev avaya com ...
Page 274: ...X 509 274 User Guide April 2013 Comments infodev avaya com ...