DataPower

DataPower

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

DataPower active-passive setup

  • 1.  DataPower active-passive setup

    Posted 30 days ago

    Hi all,

    I have two DataPower X3 appliance, version 10.5.0.9 and I want to configure them in HA active/passive mode. Can anyone help me with this?

    Thanks in advance,



    ------------------------------
    Ranko Stanojevic
    ------------------------------


  • 2.  RE: DataPower active-passive setup

    Posted 30 days ago

    which part of the documentation is not clear, do you have a specific question?



    ------------------------------
    Jeroen Willems
    Integration Architect - Managing Partner
    Integration Designers
    ------------------------------



  • 3.  RE: DataPower active-passive setup

    Posted 29 days ago

    I don't see anywhere in the documentation a setup configuration for HA, only in B2B HA. Can you please provide me link with HA configuration?

    Thanks in advance



    ------------------------------
    Ranko Stanojevic
    ------------------------------



  • 4.  RE: DataPower active-passive setup

    Posted 30 days ago

    For ingress or egress?



    ------------------------------
    Joseph Morgan
    CEO - Independent
    ------------------------------



  • 5.  RE: DataPower active-passive setup

    Posted 29 days ago

    Both. If active appliance fails, I want standby appliance to take both, ingress and egress traffic.



    ------------------------------
    Ranko Stanojevic
    ------------------------------



  • 6.  RE: DataPower active-passive setup

    Posted 29 days ago

    Hello, are you looking for "standby control"?
    Defining standby control - IBM Documentation
    Regards, Uli



    ------------------------------
    Uli Rauscher
    ------------------------------



  • 7.  RE: DataPower active-passive setup

    Posted 29 days ago
    Edited by Joseph Morgan 29 days ago

    Uli has provided the link to the process to configure standby for ingress.  The two big keys to it are definitely making the group number unique (meaning change it), ensuring the priority is set properly (something like 100 for the desired active appliance and 50 for the standby).  The only difference between the two appliance interface configurations here is the "priority" setting.

    Certainly, then, when one is active, the other will be passive until such time the active appliance is not available or standby is expressly changed via a yield standby action.

    >> This should have said:

    "The only difference between the two appliance interface standby configurations here..."



    ------------------------------
    Joseph Morgan
    CEO - Independent
    ------------------------------



  • 8.  RE: DataPower active-passive setup

    Posted 29 days ago

    Thanks for link! Do I need to configure something between these two appliances before creating standby control group? How these two datapowers know about eachother? In standby control I have only VIP address to configure, not the address of other appliance.



    ------------------------------
    Ranko Stanojevic
    ------------------------------



  • 9.  RE: DataPower active-passive setup

    Posted 29 days ago

    I've enabled standby group for both with the same groupID and authorization data, but different priority. First it was ok, primary was active and standby was in state of listening, but in one minute both are active and vip owners

    Please help me with this configuration.



    ------------------------------
    Ranko Stanojevic
    ------------------------------



  • 10.  RE: DataPower active-passive setup

    Posted 29 days ago

    strange, did you check with your network team that the group number you use doesn't  conflict with the number of an existing standby group or any network group that uses Hot Standby Router Protocol (HSRP)?
    other question, what is the latency between the 2 DP's (same DC or 2 different DC's?)



    ------------------------------
    Jeroen Willems
    Integration Architect - Managing Partner
    Integration Designers
    ------------------------------



  • 11.  RE: DataPower active-passive setup

    Posted 29 days ago

    Thanks Jeroen. Both appliance are in same DC, same rack. 

    I will check with network team about network group.



    ------------------------------
    Ranko Stanojevic
    ------------------------------



  • 12.  RE: DataPower active-passive setup

    Posted 28 days ago

    Hello everyone,

    My bad, it was configured in trunc with portChannel for ingress and egress traffic, so I need a link aggregation and vlan interface to create. Now everything is fine, primary DP is active and other standby for both traffic types.

    Thanks everyone for helping me.

    Regards,



    ------------------------------
    Ranko Stanojevic
    ------------------------------



  • 13.  RE: DataPower active-passive setup

    Posted 28 days ago

    that explains ;-)

    thanks for sharing this and glad you found the solution!



    ------------------------------
    Jeroen Willems
    Integration Architect - Managing Partner
    Integration Designers
    ------------------------------