topic Re: cli and cluster in Firewall and Security Management

cli and cluster

supiarmando — Fri, 28 May 2021 10:31:04 GMT

Hello,

we are working on a failback scenario for removing a 1G interface and replace this with a 10G interface.

Is there any way to setup a cluster interface without mgtm only via cli on console?

What we found so far:

Set Interface:

HostName> set interface eth1 state on
HostName> add interface eth1 ipv4-address 192.168.1.1 mask-length 24
HostName> save config

Missing: how to set up the VIP via console.

Thanks for any advice

Re: cli and cluster

G_W_Albrecht — Fri, 28 May 2021 11:35:16 GMT

Setting up Clusters without Dashboard is not possible (afaik) - see the ClusterXL R81 Administration Guide for details !

Re: cli and cluster

PhoneBoy — Fri, 28 May 2021 15:24:15 GMT

If you’re using VRRP instead of ClusterXL, you can set up a VIP with just the CLI.
However, the actual sync/failover still requires SmartConsole or API calls.

Re: cli and cluster

supiarmando — Fri, 28 May 2021 15:31:33 GMT

Good idea, sadly our actual design uses ClusterXL. We are now going to setup a snapshot before the change and will revert as a failback. This should do the trick 🙂

Thanks for the super fast reply, you are great.

Re: cli and cluster

the_rock — Sat, 29 May 2021 01:17:57 GMT

You had right commands, but I believe responses are correct, VIP cant be configured via clish.

Re: cli and cluster

HeikoAnkenbrand — Sat, 29 May 2021 06:55:19 GMT

Hi @supiarmando,

There is a way on a open server to replace a 1G interface with a 10G interface without changing anything in management.
In the file 00-OS-XX.rules, replace the eth name of the 1G network card with the 10G network card.

/etc/udev/rules.d/00-OS-XX.rules
ID=="0000:02:01.0", NAME="eth0"
ID=="0000:02:05.0", NAME="eth1"
ID=="0000:02:06.0", NAME="eth2"

ID = PCI bus ID
NAME = Interface name

After that rebote the gateway.