IC-4000 Cluster

[Kamran_]

Hi everybody,

i wanna deploy 2 ic-4000 as Active / Passive mode, also need information regarding load balancer, plz guide me through detailed steps for creating Active/Passive cluster..At the moment 1 IC-4000 is working with isg-2000 as enforcer in my environment.. Guide me what configuration changes are required on Firewall / OAC Agent also.

how many IP addresses are required.

on OAC there is already one IP address is configured (IC-4000 current)

Regards,

Raja

[mars246_]

you need to setup an ip that is used by the cluster.

[Kamran_]

hi

thanks for reply but Just IP..??????? i asked for detailed steps..

regards

Raja

[StanislasP_]

UAC Admin Guide, Section "Clustering"!

[Kamran_]

Juniper's documentation ...i cant understand that...ok let me explain my requirements.

1) I have one IC-4000 working fine in my environment, i wanna go for its backup or redundancy u can say that..

2) i wanna know that should i have to purchase just one more hardware or licenses also...if yes then which liceses

3)on first IC-4000 i have these licenses add 500 simultaneous endpoints to IC 4000 and add UAC to installed odyssey client on IC 4000

4) In documentation there is a load balancer in Active/Active. What is this where can i get this..???

Regards,

Raja

[StanislasP_]

2) For redundant configuration, you need purchase one more hardware and one more license : IC4000-CL. Without this new license, the new hardware cannot be used.

4) You can configure the cluster in Active/Active configuration with an external Load Balancer. I have never configure this type of architecture.

In Active/Passive Configuration, you configure one IP for IC4000 and one virtual IP.

Stanislas

[Kamran_]

hi

Thanks Stanislas for ur reply, sorry i forgot one more thing ..with First IC-4000 i already purchased cluster license.

Means i have these licenses with First IC-40000

1) add 500 simultaneous endpoints to IC 4000

2) add UAC to installed odyssey client on IC 4000

3) IC-4000-CL

Q1) So now still i need CL license with new hardware or this license will work which i have purchased with First IC-4000..

or if in future i wanna add one more hardware, then, i have to purchase one more with that hardware...

is Cluster license is also hardware dependent..???

or i can say that for every ic-4000 to be a member of cluster i need to purchase one more cluster license for that hardware

Q2) What is External Load balancer? is this a software / a hardware ? Kindly provide a bit details about few brands available?

Regards,

Raja M Kamran

[StanislasP_ · Accepted solution]

Hi,

1 - If you purshased Cluster License with the first IC4000, this one may not have been installed. you cannot install cluster and not Cluster license on the same hardware.

If you activated this license with the first IC4000 hardware ID, you must open a case on Juniper Support to change this with the other hardware ID.

In IC4000 environment, a cluster support only two members. (IC6000 and IC6500 support more than two members in a cluster and one cluster licence must be purchased for each member)

these licenses must be installed on the first IC4000

- add 500 simultaneous endpoints to IC 4000

- add UAC to installed odyssey client on IC 4000

2 - An external Load Balancer is an hardware in front of IC4000 appliances which accept connections on virtual IP and load balance connections to IC4000 real IPs. these products are Load Balancers :

- Juniper DX - EOS

- F5 BigIP LTM

- Radware AppDirector or Alteon

Regards,

Stanislas

[Kamran_]

Thanks Stanislas, you gave me very valuable information.

Thanks alot again.

Regards,

Raja