Sangfor Community»Categories Products Internet Access Gateway (IAG) High Availability on vmIAG 17.0.73

High Availability on vmIAG 17.0.73

views: 1637 | comments: 9 | added to Favorites 0
Lights on | 提示:支持键盘翻页<-左 右->
    组图打开中,请稍候......
Created: 29 Jun 2024 02:00

Summary:

Hello, I'm currently in the middle of LAB for my next POC I'm using 2 vm IAG 17.0.73 and want to do HA active-standby mode, here's what i configure before activating HA : IAG MAIN :deployment : Sing ...

Reply

jerome_itable Posted 03 Jul 2024 08:46
The behavior you're encountering with your Sangfor IAG HA setup in active-standby mode suggests some configuration issues.

Here's a breakdown of the problems and potential solutions:

Secondary Device Issues:

    License Loss:  The secondary device losing its license after HA activation is a major issue. Licenses are typically tied to the device's hardware identifier (MAC address, serial number), and in HA, only the active device should actively utilize the license.

    GUI Inaccessibility & Ping Failure: This indicates potential communication problems between the secondary device and the network. The secondary shouldn't lose internet access completely, but its role might change during failover.

    IP Address Change:  The secondary device's eth0 IP address changing to the main device's eth0 IP address is not normal behavior.  Both devices in HA should have unique IP addresses.

Potential Solutions:

    License Activation: Double-check the license activation process for the secondary device. Ensure it's activated with its own unique license key. Consult Sangfor documentation or support for specific instructions on activating licenses in an HA environment.

    Network Connectivity: Verify network connectivity for the secondary device. Check firewall rules, routing configurations, and ensure proper communication exists between the secondary device and the network.

    HA Interface Configuration:  Review your HA interface configuration. The secondary device's network interface used for HA communication (typically separate from management and data interfaces) might be misconfigured.
Newbie290036 Posted 02 Jul 2024 19:35
I think there is a misconfiguration or an issue with the HA setup process for your IAG (Intelligent Access Gateway) devices. Please check this.
Zonger Posted 02 Jul 2024 18:02
It is misconfiguration in the HA setup of your IAG VMs. In an HA active-standby configuration, the secondary device should not lose its license or experience network interface IP conflicts.
pmateus Posted 02 Jul 2024 16:50
Hi,

I think  on active-standby mode the standby device will be on failed state with the configurations of the active device. So if the active device fail, the standby will assume the the active role with the same ips.

Thanks
Enrico Vanzetto Posted 02 Jul 2024 16:15
Hi, It seems like there could be an issue with the High Availability (HA) setup of your IAG Virtual Machines (VMs). In an active-standby HA configuration, the secondary device shouldn’t lose its license or encounter IP conflicts on the network interface.

Make sure that the HA configuration designates unique virtual IP addresses for failover and that both VMs are accurately configured with distinct management and network interfaces.

Double-check the HA settings on both devices, ensuring that the secondary device is correctly set as the standby and isn’t prematurely trying to take over the primary’s IP address.

Inspect for any inconsistencies in the network settings or potential IP conflicts that might lead to the secondary device losing connectivity and its license status.
mdamores Posted 02 Jul 2024 14:45
Hi,

Please check if the secondary device is configured as standby and both devices have unique network interface and management IP address to avoid conflict. Also, make sure that HA setup of your IAG is in HA active-standby mode.

Farina Ahmed Posted 02 Jul 2024 13:52
It appears there might be a misconfiguration in the HA setup of your IAG VMs. In an HA active-standby configuration, the secondary device should not lose its license or experience network interface IP conflicts. Ensure that the HA configuration specifies unique virtual IP addresses for failover and that both VMs are correctly configured with separate management and network interfaces. Verify the HA settings on both devices, making sure that the secondary device is properly set as the standby and not trying to assume the primary's IP address prematurely. Check for any discrepancies in the network settings or potential IP conflicts that might cause the secondary device to lose connectivity and license status.
Prosi Posted 02 Jul 2024 12:15
Thank you for sharing
vesogi7900 Posted 01 Jul 2024 12:58
It sounds like you’re encountering some issues with your HA setup. Here are a few things to check and try:

1. HA Configuration: Ensure that both devices have the correct HA configuration. This includes setting the correct HA roles (active and standby) and ensuring that the HA settings are identical on both devices.
2. Network Interfaces: Verify that the network interfaces are correctly configured and that there are no IP address conflicts. The issue with the secondary device taking the MAIN device’s IP address on eth0 suggests a possible misconfiguration.
3. License Synchronization: Make sure that the licenses are properly synchronized between the two devices. Sometimes, the secondary device might lose its license if there is a communication issue or if the licenses are not correctly applied.
4. HA Heartbeat: Check the HA heartbeat configuration. Ensure that the heartbeat interfaces are correctly connected and that there is no network issue causing the heartbeat to fail.
5. Logs and Diagnostics: Review the logs on both devices to see if there are any error messages or warnings that could provide more insight into the issue. This can help identify if there are any specific problems with the HA setup.
6. Documentation and Support: Refer to the official documentation for IAG 17.0.73 to ensure that all steps are correctly followed. If the issue persists, consider reaching out to Sangfor support for more detailed assistance.

Here are some general steps for configuring HA in active-standby mode12:

* Connect HA Ports: Ensure that the HA ports on both devices are connected.
* Configure HA Settings: Set the HA mode to active-standby and configure the HA group ID.
* Synchronize Configuration: Ensure that the configuration is synchronized between the primary and secondary devices.
* Monitor HA Status: After activating HA, monitor the status to ensure that both devices are correctly recognizing each other and that the failover mechanism is working as expected.