HP TMS zl Module Security Administrator's Guide

1-47
Managing TMS zl Modules
Configuring High Availability Clusters
HA Architecture Overview
Two TMS zl Modules can be clustered for HA. The two modules can be in the
same switch chassis (intra-chassis cluster) or in two different switch chassis
(inter-chassis cluster). Only one HA cluster per switch chassis is supported.
When HA is enabled, the module's internal port 2 becomes an untagged
member of the HA VLAN and is dedicated to HA traffic. All messages such as
HA control protocol, synchronization, and HA management messages are
communicated through this interface.
Configure the HA VLAN on the switch through the switch CLI, but do not
associate it with a Zone, and do not allow the switch to have an IP address on
that VLAN. Do not use the switch CLI to configure IP addresses for the TMS
zl Modules in the HA VLAN. If the two TMS zl Modules are installed in different
switches, the same HA VLAN must be configured on both switches.
Configure the HA VLAN IP addresses for the two TMS zl Modules in the cluster
through the NIM Create Cluster window, as described in “Creating an HA
Cluster” on page 1-52. The same HA VLAN must be configured on both of the
modules in the cluster. NIM automatically configures the HA VLAN on the
modules’ internal port 2, which is also dedicated to High Availability traffic.
In a cluster, the TMS zl Modules operate in the HA active-standby mode. In
active-standby mode, data processing is done by the Master, and the other
module acts as a passive Participant that monitors the correct functioning of
the Master. The other member (Participant) becomes active only when the
Master fails and it is elected the new Master.
Figure 1-29. Architecture of HA Clusters