Maximizing Network Performance and Redundancy
Next Generation Security Gateway Guide R80.20 | 263
4 In the Add Virtual Router window, configure these parameters:
• Virtual Router ID - Enter a unique ID number for this virtual router. The range of
valid values is 1 to 255.
• Priority - Enter the priority value, which selects the Security Gateway that takes over
in the event of a failure. The Security Gateway with the highest available priority
becomes the new VRRP Master. The range of valid values 1 to 254. The default value
is 100.
• Hello Interval - Optional. Enter or select the number of seconds, after which the
VRRP Master sends its VRRP advertisements. The valid range is between 1 (default)
and 255 seconds.
All VRRP routers on a Security Gateways must be configured with the same hello
interval. Otherwise, more than one Security Gateway can be in the VRRP Master
state.
The Hello interval also defines the failover interval (the time a VRRP Backup router
waits to hear from the existing VRRP Master before it takes on the VRRP Master
role). The value of the failover interval is three times the value of the Hello interval
(default - 3 seconds).
• Authentication:
• None - To disable authentication of VRRP packets
• Simple - To authenticate VRRP packets using a plain-text password
You must use the same authentication method for all Security Gateways in a
Virtual Router.
• Priority Delta - Enter the value to subtract from the Priority to create an effective
priority when an interface fails. The range is 1-254.
If an interface fails on the VRRP Backup, the value of the priority delta is subtracted
from its priority. This gives a higher effective priority to another Security Gateway
member.
If the effective priority of the current VRRP Master is less than that of the VRRP
Backup, the VRRP Backup becomes the VRRP Master for this Virtual Router. If the
effective priority for the current VRRP Master and VRRP Backup are the same, the
gateway with the highest IP address becomes the VRRP Master.
•
Auto-deactivation - When an interface is reported as DOWN, a cluster member's
Priority value is reduced by the configured Priority Delta amount. If another cluster
member exists with a higher Priority, it will then take over as VRRP Master to heal
the network.
By default, some cluster member will be elected as VRRP Master, even if all cluster
members have issues and are reporting a Priority of zero.
The auto-deactivation option can be enabled to change this behavior and ensure that
no cluster member is elected as VRRP Master, if all cluster members have a Priority
of zero.
When this option is enabled, Priority Delta should be set equal to the Priority value,
so that Priority will become zero, if an interface goes down.
To Next Page