AhnLab TrusGuard - Page 67

3
Chapter3 Installation 67
 add_llcf: Sets LLCF port group.
 del_llcf: Disables LLCF port group.
 get_llcf_status: Displays LLCF port group connection status.
 get_llcf_support: Displays network port that supports LLCF.
Set Bridge: Active-Standby HA
The following requirements must be met before implementing Active-Standby HA using bridge
interface.
 The upper router and bottom switch must be the same L2 sub-network.
 The upper/lower router and switch must use STP.
 The bridge interface must set STP.
 Route bridge is selected using STP, so you do not need to set the monitoring port when setting HA
(A virtual IP address is not needed).
 All the hosts in the bottom will use the IP address of the upper router as the gateway.
 To use NAT, get an IP address for the bridge, or use a secondary port with the same IP address.
Set Bridge: Active-Active HA
The following requirements must be met before implementing Active-Active HA using bridge
interface.
 OSPF or RIP must be used in the upper/lower router.
 When setting OSPF or RIP in TrusGuard, use the upper router’s IP address and bottom L3 switch’s IP
address.
 The bottom switch must support L3.
 The bridge section and section connected to the bottom switch must use a different sub-network.
 All the hosts in the borrom must use the bottom switch's IP addrss as the gateway.
 Routing is performed using routing protocol, so you do not need to set the monitoring port when
setting HA (A virtual IP address is not needed).
 To use NAT, get an IP address for the bridge, or use a secondary port with the same IP address.