Joining a vpn gateway to an existing cluster, Setting up a one-armed configuration, Joining a – Nortel Networks NN46120-104 User Manual

Page 52

Advertising
background image

52

Initial Setup

Joining a VPN Gateway to an Existing Cluster

After having installed the first VPN Gateway in a cluster, additional NVGs
may be added to the same cluster by specifying the Management IP
address (MIP) that identifies the cluster. When you are installing the VPN
Gateway to join an existing cluster, less information is needed because
the new VPN Gateway will fetch most of the configuration from the other
NVG(s) in the cluster.

The following applies when joining a new VPN Gateway to an existing
cluster:

If the VPN Gateway you are about to join is installed on a different
subnet than existing NVGs, this new device must be configured as a
slave. Master NVGs cannot exist on different subnets.

If the Access list consists of entries (for example, IP addresses for
control of Telnet and SSH access), also add the cluster’s MIP, the
existing VPN Gateway’s host IP address on Interface 1, and the
host IP address you have in mind for the new NVG to the Access
list. This must be done before joining the new VPN Gateway,
otherwise the devices will not be able to communicate. Use the

/cfg/sys/accesslist

command. If the Access list is empty, this

step is not required.

If the VPN Gateway you are about to join has a different software
version than existing NVGs, install the preferred software version on
the new VPN Gateway before joining it (see

“Reinstalling the Software”

(page 70)

) or upgrade the whole cluster to the same software version

as the new VPN Gateway (see

“Performing Minor/Major Release

Upgrades” (page 74)

). Use the

/boot/software/cur

command to

check the currently installed software version.

Setting up a One-Armed Configuration

If the currently installed VPN Gateway(s) in the cluster are set up for a
one-armed configuration you probably want the new VPN Gateway to be
set up similarly.

When you log in after having started the VPN Gateway the first time, you
will enter the Setup menu.

Step

Action

1

Choose join from the Setup menu to add a VPN Gateway to
an existing cluster.

Nortel VPN Gateway

User Guide

NN46120-104

02.01

Standard

14 April 2008

Copyright © 2007-2008 Nortel Networks

.

Advertising