Can MAG on Active/Passive do stateful failover?

[michael.saw_]

Hi All,

Can MAG on Active/Passive do stateful failover?

Are users able to maintain their session during failover?

[Kita_]

Hello Michael,

If the cluster fails over to the passive node, all sessions should be transferred to the passive node.

[zanyterp_]

Yes, you can cluster two MAG units. Users will not need to re-login, but any active data transfers will need to be restarted.

[michael.saw_]

Thanks, Kita, zanyterp.

Anyone tried on RDP session?

[zanyterp_]

Tried to see what happens to users w/ an active RDP session? I have not, but I know of those who use this successfully in near-WTS only environments successfully.

[michael.saw_]

Hi All, I found this on Juniper kb: http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB8539 Some RDP concerns...

[Kita_]

Hello Michael,

The kb article does make sense as all other connection besides core access (through the rewriter) is specific to each node. This means if the cluster fails over, the user will be disconnected and will need to reconnect. Is your concern will only RDP sessions? If so, are we talking about using Juniper Terminal Service like WTS? I can run a few tests to reconfirm my understanding.

[zanyterp_]

The application/client software/data transfer is disconnected, yes, as a new tcp connection is needed. However users will not need to re-login.

[michael.saw_]

Hi Kita,

Thanks. We had a concern on the RDP. We will set the expectations correctly then

Hi zanyterp,

Noted on this.