Network Setup
71
ipaddr is the floating IP address. You do not need to manually configure this address on
either unit, the script handles this internally.
alias is an alias interface name, such as eth0:9, on which to configure ipaddr when this
device is the master. If you do not specify an alias, the script automatically selects the
eth0:9.
-d enables extra debug output to the sytem log.
-n disables the High Availability or HA LED, if it is present on your CyberGuard SG
appliance.
Note
Normally the script controls the HA LED to indicate the status of HA, however if two or
more highavaild scripts are used for different interfaces, only one is able to control the
LED.
Advanced configurations
The supplied script is intended as a starting point for more advanced High Availability
configurations.
By default, a device is considered "up" and a candidate to become the master if it is
powered up and connected to the network segment. If you wish to have the device
become master only if some other service is available (say, an Internet connection), a
Test command may be added that checks for the availability of that resource and returns
0 if it is available.
/bin/highavaild may be configured any any interface, however if used on a non-LAN
interface, appropriate packet filter rules need to be configured to allow traffic via the
floating IP address (see the Packet Filtering section of the chapter entitled Firewall).