HA Node Connections

To use HA, you must establish Layer 2 and Layer 3 networks that interconnect two Oracle Communications Session Border Controllers and support HA with the required physical network connections. The basic network set-up in the following diagram shows an HA node deployment where each system is connected to its own Layer 2 switch. This set-up provides a measure of added redundancy in the event that one of the switches fails.

Here, the active system is using the virtual MAC and IP addresses.

The HA Node Connection diagram is described above.

In the second diagram, the same network is shown with the HA node having experienced a switchover. The previously standby Oracle Communications Session Border Controller has taken over the active role in the HA node and is using the virtual IP and MAC addresses.

The HA Node Connections Switchover diagram is described above.

Note:

Switches should never be in master-slave mode. If they are, HA will not work correctly.

The following are hardware set-up and location considerations for placing an HA Node:

You must set up each Oracle Communications Session Border Controller according to the requirements and safety precautions set out in the Oracle Communications System Hardware Installation Guide.
Each Oracle Communications Session Border Controller’s media interfaces must be connected to the same switches (or other network entities), as shown in the diagram above.
The length of the shielded crossover 10/100 category 5 Ethernet cable that connects the Oracle Communications Session Border Controllers from the rear interfaces must be able to reach from the configured rear interface on one Oracle Communications Session Border Controller to the configured rear interface on the other.

HA nodes use Oraclerder element redundancy protocol for its tasks. This protocol uses a connection between the rear interfaces of two Oracle Communications Session Border Controllers to checkpoint the following information: health, state, media flow, signaling, and configuration.

We recommend that you use shielded category 5 (RJ45) crossover cables for all 10/100 Ethernet connections used for HA.

You can set up either single or multiple rear interface support for your HA node. For single interface support, one cable connects the two Oracle Communications Session Border Controllers; for multiple interface support, two cables are used. However, the software configurations for each type of connection mode are different.

When you make these connections, do not use port 0 (wancom0) on the rear interface of the Oracle Communications Session Border Controller chassis; that port should only be used for Oracle Communications Session Border Controller management. Instead, use ports 1 and 2 (wancom1 and wancom2).

To cable Oracle Communications Session Border Controllers using single rear interface support:

Using a 10/100 category 5 crossover cable, insert one end into either port 1 (wancom1) or port 2 (wancom2) on the rear interface of the first Oracle Communications Session Border Controller.
Insert the other end of the cable into port 1 or port 2 on the rear interface of the second Oracle Communications Session Border Controller. We recommend that you use corresponding ports on the two systems. That is, use port 1 on both systems or use port 2 on both systems.
Perform software configuration for these interfaces as described in this chapter.

To cable Oracle Communications Session Border Controllers using multiple rear interface support:
Using a 10/100 category 5 crossover cable, insert one end into port 1 on the rear interface of the first Oracle Communications Session Border Controller.
Insert the other end of that cable into port 1 on the rear interface of the second Oracle Communications Session Border Controller to complete the first physical connection.
Using a second 10/100 category 5 cable, insert one end into port 2 on the rear interface of the first Oracle Communications Session Border Controller.
Insert the other end of this second cable in port 2 on the rear interface of the second Oracle Communications Session Border Controller to complete the second physical connection.
Perform software configuration for these interfaces as described in this chapter.

Virtual MAC Addresses

In order to create the HA node, you need to create virtual MAC addresses for the media interfaces. You enter these addresses in virtual MAC address parameters for phy-interface configurations where the operation type for the interface is media.

The HA node uses shared virtual MAC (media access control) and virtual IP addresses for the media interfaces. When there is a switchover, the standby Oracle Communications Session Border Controller sends out an ARP message using the virtual MAC address, establishing that MAC on another physical port within the Ethernet switch. Virtual MAC addresses are actually unused MAC addresses that based on the Oracle Communications Session Border Controller’s root MAC address.

The MAC address is a hardware address that uniquely identifies each Oracle Communications Session Border Controller. Given that, the virtual MAC address you configure allows the HA node to appear as a single system from the perspective of other network devices. To the upstream router, the MAC and IP are still alive, meaning that existing sessions continue uninterrupted through the standby Oracle Communications Session Border Controller.

Depending on the type of physical layer cards you have installed, you can create MAC addresses as follows: Four Ethernet (MAC) address for each configured four-port GigE physical interface card.

Virtual MAC Address Configuration

To create a virtual MAC address:

Determine the Ethernet address of the Oracle Communications Session Border Controller by using the ACLI show interfaces command. This command only works if you have already set up phy-interface configurations. Otherwise, you will get no output.
The example below shows you where the Ethernet address information appears; this sample has been shortened for the sake of brevity. For each type of physical interface card, the Oracle Communications Session Border Controller displays the following:
```
ORACLE# show interfaces
f00 (media slot 0, port 0)
     Flags: UP BROADCAST MULTICAST ARP RUNNING
     Type: GIGABIT_ETHERNET
     Admin State: enabled
     Auto Negotiation: enabled
     Internet address: 10.10.0.10     Vlan: 0
     Broadcast Address: 10.10.255.255
     Netmask: 0xffff0000
     Gateway: 10.10.0.1
     Ethernet address is 00:08:25:01:07:64
```
Identify the root portion of the Ethernet (MAC) address.

Each Oracle Communications Session Border Controller has MAC addresses assigned to it according to the following format: 00:08:25:XX:YY:ZN where:
- 00:08:25 refers to Acme Packet
- XX:YY:ZN refers to the specific Oracle Communications Session Border Controller
- N is a 0-f hexadecimal value available for the Oracle Communications Session Border Controller
  
  In this example, the root part of this address is 00:08:25:XX:YY:Z.
To create an unused MAC address (that you will use as the virtual MAC address) take the root MAC address you have just identified. Replace this N value with unused hexadecimal values for the Oracle Communications Session Border Controller: 8, 9, e, or f.

In other words, you change the last digit of the MAC address to either 8, 9, e, or f depending on which of those address are not being used.

For example, for an HA node with MAC address bases of 00:08:25:00:00:00 and 00:08:25:00:00:10, the following addresses would be available for use at virtual MAC addresses:
- 00:08:25:00:00:08
- 00:08:25:00:00:09
- 00:08:25:00:00:0e
- 00:08:25:00:00:0f
- 00:08:25:00:00:18
- 00:08:25:00:00:19
- 00:08:25:00:00:1e
- 00:08:25:00:00:1f
  
  Corresponding media interfaces in HA nodes must have the same virtual MAC addresses. Given that you have various physical interface card options, the following points illustrate how virtual MAC address can be shared:
If you are using a four-port GigE physical interface card, both the active Oracle Communications Session Border Controllerand the standby Oracle Communications Session Border Controller might have the following virtual MAC address scheme for the slots:
- Slot 0 _ 00:08:25:00:00:0e and 00:08:25:00:00:0f
- Slot 1 - 00:08:25:00:00:1e and 00:08:25:00:00:1f
  Note:
  Note the virtual MAC addresses you have created so that you can reference them easily when you are configuring the phy-interfaces for HA.

Virtual MAC Addresses for VNFs

Virtual Network Functions (VNFs) rely on their hypervisor environment for MAC address establishment, advertisement and resolution. As such, you cannot derive these addresses using the same method as you do for Acme platforms. For VNFs, Oracle recommends establishing private MAC addressing for virtual MAC address configuration.

To support HA, you configure virtual Ethernet (MAC) address MAC addresses based on the Burned In Addresses (BIA) of the media interfaces. To determine what the virtual MAC addresses should be, you first identify a BIA and then calculate the virtual MACs based on that.

To define the virtual addresses you need to configure for each interface:

Identify the base MAC of eth0/wancom0 physical interface using the show interfaces command. For example, in the following display, you can see the base MAC is 00:50:56:C0:00:08:

eth(unit number 0):
Flags: (0x78843) UP BROADCAST MULTICAST ARP RUNNING INET_UP
Type: ETHERNET_CSMACD
inet: 111.22.0.123
Broadcast address: 111.22.255.255
Netmask 0xffff0000 Subnetmask 0xffff0000
Ethernet address is 00:50:56:C0:00:08

Set the bottom nibble of the first byte to 2 to define the address as locally administered.
Set the top nibble of the first byte to 0 and increment it for each interface.

For example, using the base-MAC for eth0, 00:50:56:C0:00:08, you assign the virtual addresses as follows:

First media interface virtual MAC = 02:50:56:C0:00:08
Second media interface virtual MAC = 12:50:56:C0:00:08
Third media interface virtual MAC = 22:50:56:C0:00:08
Forth media interface virtual MAC = 32:50:56:C0:00:08