Start a conversation

Kerio Control High Availability (HA) Special cases

Overview:

This article explains various special cases in High availability configuration

1-Wifi

Control will disable Wifi on slave whenever HA validation completes. It will enable Wifi again when the master goes down or HA disabled. This behavior can be controlled from the configuration.

To disable control managing wifi,  execute: ./tinydbclient "update HaConfig set ManageWifi=0"

2-PPPoE

Control will hang up all PPPoE interfaces in a slave when HA validation completes. It will dial them automatically when the master goes down or HA disabled. This behavior can be controlled from the configuration.

To disable control managing PPPoE, execute: ./tinydbclient "update HaConfig set ManageSlaveDial=0"

3-Routes

In slave, when there is no ethernet interface in "Internet Interfaces" and since control disables all PPPoE on slave, to make sure that slave have internet access for its updates like IPS, Anti-Virus, we are creating a new static route, that will redirect all traffic to sync interface, so master will deliver these updates for slave. This behavior can be controlled from the configuration.

To disable adding route, execute: ./tinydbclient "update HaConfig set AutoCreateRoute=0"

4-Traffic Rules

Control will create a traffic rule for ucarp traffic automatically whenever HA enabled. It will contain interfaces selected in virtual IP list as the source, 224.0.0.18 as the destination and VRRP as a service service 

To disable creating route automatically, execute : ./tinydbclient "update HaConfig set AutoCreateRule=0"

5-DHCP Settings

Control will update gateway in DHCP scope of selected virtual IP interface (if there is such a scope) so any machine getting IP from control using that interface will see virtual IP as gateway. Also whenever HA completes, the slave will not respond DHCP request coming to that interface, so only master DHCP scopes are active. The slave will continue to lease the IP address either master goes down or HA disabled. You can see relevant logs in the Debug log with "High Availability" messages.

Additional Notes:

  • It doesn't matter if you first configured master or slave. They will complete their validation separately
  • Even there is a problem with validation, control will continue sending the same data for validation. So if you fix a problem not related to HA configuration (like updating interface names, or adding a traffic rule) you don't need to disable/enable HA since it will complete validation automatically
  • You can assign virtual IP to any ethernet interface (including VLANs). Actually, HA doesn't care about the interface group or consequence of adding virtual IP. It just runs a script to add virtual IP when a machine becomes active and remove that IP when it is passive
Choose files or drag and drop files
Was this article helpful?
Yes
No
  1. Priyanka Bhotika

  2. Posted

Comments