HP TMS zl Module Security Administrator's Guide

1-52
Managing TMS zl Modules
Configuring High Availability Clusters
■ Any modification to the policy configuration (add, modify or delete)
that is stored on the Master and synchronized to the Participant
requires a reboot of the Participant. Execute the synchronization
process at the end of all policy configuration changes. One of the
major benefits of this approach is that it reduces the chance of
synchronization timing problems with the policies that form the basis
of firewall security, and thereby helps to insure proper failover.
Creating an HA Cluster
HA clusters can be created from within NIM, or through the TMS zl Module
CLI or Web browser interface and then imported into NIM. The next section
describes creating the cluster by using NIM. See the section, “Import an HA
Cluster Into NIM” on page 1-57 to find out about that procedure.
Note For clusters configured in NIM, the Participant modules are automatically
removed from the PCM navigation tree and are not visible in the Devices List.
For clusters configured via the TMS zl Module CLI or web browser interface
and imported into NIM, the Participant modules remain visible in the naviga-
tion tree, but are not reachable. They can be deleted from the navigation tree
without affecting the cluster.
The Participant module information can be seen by clicking on the View button
on the right side of the cluster information in the TMS - High Availability
window.The High Availability Cluster Details window displays the current
complete information for that HA cluster.
Create the Cluster in NIM
1. Prior to creating the cluster, complete two preliminary steps:
a. Make sure that the two modules that will form the cluster have the
same SNMP communication parameters configured on them.
b. On the two modules, make sure that NIM has the most current
configuration information from the modules that will be used to
create the cluster by synchronizing the appropriate TMS properties.
See “Synchronizing TMS zl Properties” on page 1-17 for the proce-
dures to complete this step. Select both modules as the devices to
synchronize, and select the Network and System folders as the prop-
erties to synchronize.