SunScreen 3.1 Administration Guide

Setting Up High Availability (HA)

See Chapter 6, "High Availability," and the SunScreen Reference Manual before using the command line to set up HA.

To Set Up HA
  1. To install HA on the Screen designated to be the Primary HA Screen (thereby creating a new HA cluster containing one Screen), type the following:


    # ssadm ha init_primary interface
    

  2. To install HA on the Screen designated to be the Secondary HA Screen type the following:


    # ssadm ha init_secondary interface primaryIP
    

    Where:

    • interface is the interface to be used for the HA heartbeat and synchronization.

    • primaryIP is the IP address (on the HA network) of the Primary Screen in the cluster.

  3. To add the HA secondary Screen to the existing HA cluster, execute the following command on the primary machine in the cluster:


    # ssadm ha add_secondary secondaryIP
    

    Where:

    • secondaryIP is the IP address (on the dedicated HA network) of the Secondary Screen to be added.


    Note -

    After adding an HA Secondary Screen and activating your policy, the new Secondary Screen may become active. If you need to perform additional administration on the Primary Screen, you must direct the Secondary Screen to become passive in order to communicate with the Primary Screen.


To Remove an HA Host

An HA setup is installed by using commands outside the configuration editor. Removing the HA setup would consist of removing the HA_* options from the Screen objects on the machines.

For example, a list of the HA setup would be:


edit> list screen
"vorticity" MASTER "barotropic" CDP
RIP NIS HA_SECONDARY HA_IP 129.192.1.2
"barotropic" ADMIN_CERTIFICATE "barotropic.admin" CDP
DNS NIS HA_PRIMARY HA_IP 129.192.1.5 HA_ETHER 8:0:20:9e:e0:66
 
edit> del screen vorticity
edit> add screen barotropic ADMIN_CERTIFICATE barotropic.admin CDP DNS NIS 

    Save and activate your configuration.

To View HA Information

    Type the following to display information, such as the current Active or Passive status of the local HA machine and the current state of the HA daemon.

    • For local administration:


      # ssadm ha status
      

    • For remote administration:


      # ssadm -r Screen_name ha status