Maximizing Network Performance and Redundancy
Next Generation Security Gateway Guide R80.20 | 262
2 In the VRRP Global Settings section:
• Cold Start Delay - Configures the delay period in seconds before a Security Gateway
joins a Virtual Router. Default = 0.
• Interface Delay - Configure this when the Preempt Mode of VRRP was turned off.
This is useful when the VRRP node with a higher priority is rebooted, but must not
preempt the existing VRRP Master that is handling the traffic, but is configured with a
lower priority. Sometimes interfaces that come up take longer than the VRRP timeout
to process incoming VRRP Hello packets. The
Interface Delay
extends the time that
VRRP waits to receive Hello packets from the existing VRRP Master.
• Disable All Virtual Routers - Select this option to disable all Virtual Routers defined
on this Gaia system. Clear this option to enable all Virtual Routers. By default, all
Virtual Routers are enabled.
• Monitor Firewall State - Select this option to let VRRP monitor the Security Gateway
and automatically take appropriate action. This is enabled by default, which is the
recommended setting when using VRRP with ClusterXL enabled. This must be
disabled when using VRRP with ClusterXL disabled.
Important - If you disable Monitor Firewall State, VRRP can assign VRRP Master
status to a Security Gateway before it completes the boot process. This can cause
more than one Security Gateway in a Virtual Router to have VRRP Master status.
3 Click Apply Global Settings.
Configuration Notes:
Gaia starts to monitor the firewall after the cold start delay completes. This can cause some
problems:
• If all the Security Gateway (member) interfaces in a Virtual Router fail, all Security Gateways
become VRRP Backups. None of the Security Gateways can become the VRRP Master and no
traffic is allowed.
• If you change the time on any of the Security Gateways (member), a failover occurs
automatically.
• In certain situations, installing a firewall policy causes a failover. This can happen if it takes a
long time to install the policy.
Configuring Monitored Circuit/Simplified VRRP - Gaia Portal
This section includes the basic procedure for configuring a Virtual Router using the Gaia Portal.
To add a new Virtual Router:
1 In the navigation tree, click High Availability > VRRP.
2 Configure the VRRP Global Settings (on page 261).
3 In the Virtual Routers section, click Add.
To Next Page