Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring High Availability

    Setting up HA Networking

    Before you can initialize the system as a HA pair you must first set up the network to handle the appliances.

    1. Login to the appliance as the mykonos user.
    2. Set the hostname of the appliance.

      cli system set hostname <hostname>

    3. To configure the interconnect bond, configure eth4 and eth5 (the 10G ports) to be slaves to bond0.

      cli system set interface eth4 slave true master bond0 onboot yes

      cli system set interface eth5 slave true master bond0 onboot yes

    4. Set up the bond.

      cli system set interface bond0 bootproto static ipaddr <interconnect_ip> netmask <interconnect_netmask> onboot yes

    5. Configure the management interface on eth0, eth1, eth2 or eth3.

      cli system set interface <interface> bootproto static ipaddr <ip> netmask <netmask> onboot yes

    6. Configure the DNS domain.

      cli system set dns domain <dns_domain>

    7. Configure the DNS search comain.

      cli system set dns search <search_path>

    8. Configure the DNS nameservers.

      cli system set dns nameservers <dns1>,<dns2>

    9. 9.Assign the interface configured previously as the management interface.

      cli system set management-interface <interface>

    10. Restart networking.

      cli system services restart network

      Note: Repeat this process for each of the two appliance instances.

    Pair the Nodes

    Now that the networking is setup on the appliances, they are ready to be paired into a HA system.

    1. Enter cli system initialize to enter the initialization process.
    2. A prompt asks you to verify <interface> as the management interface. Confirm, and wait for the process to finish.
    3. When the Select System Mode menu appears, select HA Master as the mode. Click OK.
    4. When the Select Interface menu appears, select the previously configured management interface as the interface (<interface> in the previous section).
    5. When the Select Interface IPs menu appears, enter the two appliance IPs (<ip> in the previous section).
    6. When the initialization prompts you for the VIP address, enter the VIP address and netmask. Wait for the process to finish.
    7. Set the NTP server.

      cli config set services.ntp.servers <servers>

    The HA system should now be complete.

    To update an HA system, navigate to the management interface (https://VIP:5000 where VIP is the Virtual IP) and update as described in the System Updates section. The update will be applied to both systems in the HA pair.

    Note: While both the active and passive machines must be on the same WebApp Secure version to be initially configured in HA mode, appliances already in HA mode will successfully update together.

    Note: In the event that one node of a High Availability pair becomes unusable, it might be necessary to tell WebApp Secure to rejoin the two instances. For example, if one node in an HA pair gets initialized (effectively severing the HA setup) you can run the command sudo mykonos-join <master-ip> on the initialized machine. This will re-link the two WebApp Secure instances, enabling the HA pair to become functional again.

    Published: 2014-06-27