Nortel Networks NN46120-104 User Manual
Page 64
64
Initial Setup
The following applies when joining a new ASA 310-FIPS to an existing
cluster:
•
If the ASA 310-FIPS you are about to join is installed on a different
subnet than existing units, this new ASA must be configured as a
slave. Master ASAs cannot exist on different subnets.
•
If the Access list consists of entries (for example, IP addresses for
control of Telnet and SSH access), also add the cluster’s MIP, the
existing ASA’s host IP address on Interface 1, and the host IP address
you have in mind for the new ASA to the Access list. This must be
done before joining the new ASA, otherwise the ASAs will not be able
to communicate. Use the
/cfg/sys/accesslist
command. If the
Access list is empty, this step is not required.
•
If the ASA you are about to join has a different software version than
existing ASAs, install the preferred software version on the new ASA
before joining it (see
“Reinstalling the Software” (page 70)
) or upgrade
the whole cluster to the same software version as the new ASA (see
“Performing Minor/Major Release Upgrades” (page 74)
). Use the
/boot/software/cur
command to check the currently installed
software version.
When you log in as the
admin
user after having started the ASA 310-FIPS
the first time, the Setup menu is displayed.
Step
Action
1
Choose join from the Setup menu to add the ASA 310-FIPS
to an existing cluster.
[Setup Menu]
join
- Join an existing iSD cluster
new
- Initialize iSD as a new installation
boot
- Boot menu
info
- Information menu
exit
- Exit
[global command, always
available]
>> Setup# join
Setup will guide you through the initial configuration
of the iSD.
2
Follow the instructions for joining a VPN Gateway to an
existing cluster.
Read the sections starting with
. When the basic setup is completed,
Nortel VPN Gateway
User Guide
NN46120-104
02.01
Standard
14 April 2008
Copyright © 2007-2008 Nortel Networks
.