Avaya FireWall-1 Manual de usuario descargar pdf (Pagina 17)

Overview of the BaySecure FireWall-1 Software

117384-D Rev 00

1-3

Selecting a Backup Management Station

A router connects to a backup firewall management station upon termination of

the TCP connection (with TCP_ABORT) between the current firewall

management station and the router.

If the connection between a firewall management station and the router fails, the

router begins a round-robin selection process. During this process, the router

continuously tries to connect to another management station at 40-second

intervals. The order of the round-robin selection is primary, first backup, and then

second backup management station.

For example, if the connection between the router and the primary management

station fails, the router tries to connect to the first backup management station. If

the connection to the first backup management station fails, the router tries to

connect to the second backup management station before trying to connect to the

primary management station again.

For information about specifying backup management stations, see “Identifying

the First Backup Firewall Management Station” on page 3-5, and “Identifying the

Second Backup Firewall Management Station” on page 3-5.

Note:

When an event, such as a LAN failure, prevents communication

between the router and the firewall management station, the firewall

management station closes the TCP connection from its end when data does

not flow from the idle TCP connection. However, the router does not close the

TCP connection from its end for a period of time determined by the TCP

keepalive timer. The TCP keepalive timer in the firewall application on the

router periodically checks the TCP connection before the router terminates the

idle TCP connection. For information on setting the TCP keepalive timer, see

Chapter 3, “Setting the Keepalive Timer.”

1 2 ... 12 13 14 15 16 17 18 19 20 21 22 ... 67 68

Sin comentarios

Avaya FireWall-1 Manual de usuario Pagina 17