The combination mode of interfaces, backup groups, and management groups determines the backup mode of the Eudemon such as master/backup mode and load balancing mode.

Master/Backup Mode

The VGMP mechanism can help realize active/standby backup. As shown in Figure 1, configure a Master management group on Eudemon A and a Slave management group on Eudemon B.

Figure 1:  Networking diagram of firewalls in master/backup mode

A1, **, A3	interfaces of Eudemon A
B1, B2, B3	interfaces of Eudemon B

Backup groups in the Figure 1 are as follows:

• Backup group 1 includes interface A1 of the Eudemon A and interface B1 of the Eudemon B.
• Backup group 2 includes interface ** of the Eudemon A and interface B2 of the Eudemon B.
• Backup group 3 includes interface A3 of the Eudemon A and interface B3 of the Eudemon B.

Management groups in the Figure 1 are as follows:

• The VGMP management group configured on the Eudemon A is the Master management group, which includes backup groups 1, 2, and 3. The priority of the master management is Level 1 (45001 + Line Processing Units (LPUs) and Enhanced Service Processing Units (ESPUs) priority).
• The VGMP management group configured on the Eudemon B is the Slave management group, which includes backup groups 1, 2, and 3. The priority of the slave management is Level 2 (45000 + LPUs and ESPUs priority).

Since Level 1 priority is higher than Level 2 priority, the Eudemon A acts as the Master and the Eudemon B as the Backup.

Table 1 shows the status of each Eudemon in master/backup mode.

Table 1:  Status of each Eudemon in master/backup mode

Eudemon	Management Group	Component	Priority	State	Session Volume
A	Master	Backup groups 1, 2, and 3	Level 1	Master	Whole
B	Slave	Backup groups 1, 2, and 3	Level 2	Backup	0

The hosts in the Trust zone, DMZ, and Untrust zone send service data to interfaces A1, **, and A3 on the Eudemon A (the Master) respectively. All sessions services are transferred by the Eudemon A.

When the Eudemon A, the Master, is not functional or a related link fails, failover is implemented. As a result, the Eudemon B, the Backup, acts the Master and assumes all session services.

documentation very useful for my job

good job

Useful document, thanks