Cluster with 1 node pending to add the 2nd

[Krishnutz]

Hi all,

I have currently started work with a new employer and have seen that they have 2 cluster firewalls set with the norm i.e. to have a cluster IP being used BUT only running with 1 machine. there is another firewall but not added to the cluster.
Is this easy to add to the cluster and what kind of downtime is required to implement without affecting the live system?


Many thanks


Krishna

[mcnallym]

If the other firewall box is ready to go into the cluster, ie is configured with the correct IP then is very easy to add into the cluster, and doesn't affect the live system.

What platform is this on as there may be other things that need doing as well rather then just adding in.

[Krishnutz]

our external is on going to be built on a Nokia IP390 and internal is on SPLAT
both using R60




Thanks for your advice

[mcnallym]

You cannot cluster IPSO with SPLAT only the same platform, however if the same platform then should be as easy as configuring the platform interfaces with SPLAT and then adding into the cluster, If IPSO then will need to config the VRRP as well to match the existing box but make sure priority will mean that the box is the backup.