Configuring a Unique IP Address For Each Chassis (UIPC)

In dual-Chassis deployment:

• A heavy load on the active Chassis can prevent you from making a network connection to the SMO and implementing management tasks.
• You can also require direct access to the standby Chassis to troubleshoot a problem, such as an SGM that is DOWN. (You cannot use the SMO to connect to the standby Chassis).

These two scenarios can be solved by assigning a unique IP address to each Chassis. Assigning a unique IP address to each Chassis adds an extra alias IP to the management interfaces on all SGMs in the Chassis.

• If there is a high load on the SMO, connect using the unique IP assigned to the standby Chassis. The SGMs on the standby Chassis are always UP and available to run gclish management commands.
• When you need to connect directly to the standby Chassis, use the standby Chassis’ unique IP.

Notes

• Similar to the SMO mechanism, only one SGM owns the UIPC task.
• The UIPC feature is disabled by default.
• If the 61000/41000 Security System is not managed by a management port, you can add the unique IP to one of the data ports.

Syntax

> set chassis id <chassis_id> general unique_ip <ip>

> delete chassis id <chassis_id> general unique_ip

> show chassis id <chassis_id> general unique_ip

Manual configuration

Although UIPC is automatically enabled when you run the configuration commands, you can also manually enable or disable it.

To manually enable UIPC:

> g_fw ctl set int fwha_uipc_enabled 1

To manually disable UIPC:

> g_fw ctl set int fwha_uipc_enabled 0

Example: Add a UIPC

> set chassis id 1 general unique_ip 172.16.6.186

Adding alias IP: 172.16.6.186 to chassis 1

Alias IP was added successfully

Example: Delete a UIPC

> delete chassis id 1 general unique_ip

Deleting alias IP 172.16.6.186 of chassis 1

Alias IP was deleted successfully