topic Re: Adding vlan on bond in Firewall and Security Management

Adding vlan on bond

ANUPAM_GAUR — Tue, 18 Dec 2018 17:59:13 GMT

Hi Guys,

We have a cluster XL running on r77.30

We have to add a new vlan 3000 on bond1 which is currently having two vlans 445 and 2234

so 3000 will be highest vlan

We cant afford failover and we cant disable cluster xl on standby node while creating subinterface

Can we still do this change directly by first creating subinterface on standby node and then on active node

Then do changes in policy and install the policy

The goal here is to avoid failover and we cant run below commands to standby

clusterXL_admin down
clusterXL_admin up

Re: Adding vlan on bond

PhoneBoy — Wed, 19 Dec 2018 00:01:20 GMT

Why exactly can't you disable ClusterXL on the standby node?

Re: Adding vlan on bond

ANUPAM_GAUR — Wed, 19 Dec 2018 07:14:00 GMT

Hi, We dont want to lose redundancy at any cost because of SLA

Re: Adding vlan on bond

Manoj_Kumar2 — Wed, 19 Dec 2018 07:57:56 GMT

First of all please check how many interfaces are being monitored with command "cphaprob -a if"

If both the interfaces (445 and 2234 ) are being monitored then there is a chance of cluster breaking. Generally if only one interface from respective bond interface is under monitoring then smallest vlan if is preferred.

If Network guys have already configured the L2 vlan across the network then there should not be any issue.

Thanks,

Manoj