Configuring a Unique IP Address For Each Chassis (UIPC)

In dual-Chassis deployment:

• A heavy load on the Active Chassis can prevent you from creating a network connection to the SMO and working with management tasks.
• It can be necessary to have direct access to the Standby Chassis to troubleshoot a problem, such as a DOWN SGM. You cannot use the SMO to connect to the standby Chassis.

You can assign a unique IP address to each Chassis to help resolve these issues. This adds an extra alias IP to the management interfaces on all SGMs.

• When there is a high load on the SMO, connect using the unique IP assigned to the standby Chassis. The SGMs on the standby Chassis are always UP and available to run gclish management commands.
• To connect directly to the standby Chassis, use the standby Chassis unique IP address.

Notes

• Only one SGM "owns" the UIPC task.
• The UIPC feature is disabled by default.
• If the 61000/41000 Security System is not managed by a management port, you can add the unique IP to one of the data ports.

Use set chassis id command to assign a unique IP address to a Chassis.

Syntax

> set chassis id <chassis_id> general unique_ip <ip>

> delete chassis id <chassis_id> general unique_ip

> show chassis id <chassis_id> general unique_ip

Manual configuration

UIPC is automatically enabled after you run the configuration commands. You can also manually enable or disable it.

To manually enable UIPC:

> g_fw ctl set int fwha_uipc_enabled 1

To manually disable UIPC:

> g_fw ctl set int fwha_uipc_enabled 0

Example: Add a UIPC

> set chassis id 1 general unique_ip 172.16.6.186

Adding alias IP: 172.16.6.186 to chassis 1

Alias IP was added successfully

Example: Delete a UIPC

> delete chassis id 1 general unique_ip

Deleting alias IP 172.16.6.186 of chassis 1

Alias IP was deleted successfully