Reboot all interfaces
during switchover
(except HA interfaces)
Reboot interfaces in a bridge during the swap If this option is enabled, interfaces on
the bridge are reinitialized at the time of the switch in order to force switches
connected to the firewall to renew their ARP tables.
Link aggregation (LACP)
Enable link
aggregation when the
firewall is passive
If this option is selected, you will be enabling link aggregation on the firewall even if it
has become passive in the cluster.
Gratuitous ARP
Periodically send
gratuitous ARP
requests
If this option is selected, you will send ARP announcements at regular intervals so that
the different devices on the network (switch, routers, etc) can update their own ARP
tables.
NOTE
Even during the passive stage, the firewall will still send an ARP announcement,
regardless of this option.
Frequency (in
seconds)
This field enables defining the frequency of ARP requests in seconds, to a maximum of
9999 seconds.
Impact of the unavailability of an interface on a firewall's quality indicator
Interface This column lists all of your firewall’s Ethernet interfaces.
Weight [0-9999] The weight allows giving the interface a relative value. “100” has been set by default
for the listed interfaces. They all therefore have the same weighting.
This criterion can be modified by selecting the relevant checkbox. E.g. specifying that
the “in” interface is more important than the “out” interface and the other interfaces
by assigning it a value of 150.
NOTE
It may be useful to set all unused interfaces to 0 so that they will not affect the
quality calculation.
NOTE
Disabled network interfaces do not appear in the high availability quality calculations.
Next, click on Apply.
Page 152/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
HIGH AVAILABILITY
To Next Page
