What are precautions for deploying the WLAN hot standby plan

27

Currently, Huawei products support dual link hot standby. When dual link hot standby is deployed, the interval at which heartbeat packets are transmitted must be the same on the active and standby ACs, no AC can function as a service gateway, service configurations must be the same on the active and standby ACs, and the active and standby ACs must use different IP address pools.

Other related questions:
Precautions for active/standby upgrade in hot standby deployment on the USG2000&5000
Precautions for active/standby upgrade in hot standby deployment on the USG2000&5000 are as follows: As for software version upgrade in hot standby deployment, you shall comply with a primary principle. That is, you shall upgrade the active and standby devices individually and upgrade the standby device first and then the active device. In addition, you must disable the HRP function during the upgrade. Note: For software version upgrade in hot standby deployment, the target software versions of the active and standby devices must be the same. Otherwise, the HRP function may fail to be enabled simultaneously. Hardware restrictions Currently, hot standby can be implemented only between two devices. The active and standby devices must have the same product model and version. The active and standby devices must have the same number and types of boards installed in the same arrangement. Otherwise, the information synchronized from the active device does not match the physical configuration of the standby device. As a result, faults occur after an active/standby switchover. If you want to use a Layer-2 interface as a heartbeat interface, add the Layer-2 interface to a VLAN. Then create a VLANIF interface and configure an IP address for it. Use the VLANIF interface as a heartbeat interface and specify remote to specify the IP address of the heartbeat interface on the remote device. Software restrictions The active and standby devices must use the same software version. Otherwise, configuration commands or session list structures of the different software versions may be different. In this case, errors may occur on the active and standby devices when you back up configuration commands and status. The BootROM versions on the active and standby devices must be the same. The operating mode of the active and standby devices must be the same, that is, both the active and standby devices must be in firewall mode or UTM mode. You are advised to use the initial configuration file on both devices. Otherwise, faults may occur after the active/standby switchover because of configuration conflicts. The names, quantities, and configuration sequence of virtual firewalls on the active and standby devices must be the same. The interfaces on the same slot of the active and standby devices must be added to the same security zone. For example, if the GigabitEthernet0/0/1 interface on the active device is added to the Trust zone, the GigabitEthernet0/0/1 interface on the standby device must also be added to the Trust zone. Configurations of heartbeat interfaces (HRP heartbeat link) on the active and standby devices must be consistent. Note: The USG2110-X/2100 and USG2100 BSR/HSR do not support the function of specifying the heartbeat interface IP address of the peer device. Therefore, you cannot use the VLANIF interface as the heartbeat interface. The service interfaces of the active and standby devices use fixed IP addresses. Therefore, you cannot use the dual-system hot backup function together with functions for obtaining IP address automatically, such as PPPoE dial-up, DHCP client, 3G, and XDSL.

What is hot-standby backup of WLAN devices
In hot-standby backup mode, one AC acts as the master AC and the other acts as the backup AC. The master AC forwards services and the backup AC monitors data forwarding. The master AC also periodically sends status information and information that needs to be backed up to the backup AC. If the master AC becomes faulty, the backup AC takes over services. On a WLAN, an AC can manage several hundreds of APs. If an AC is faulty, services on all APs associated with the AC are interrupted. Therefore, AC reliability is vital to network availability. Two hot-standby backup modes are available: HSB+VRRP and HSB+dual-link backup HSB+VRRP and HSB+dual-link backup can improve network availability. HSB supports batch backup and real-time backup between two access devices. Before link switching, the standby AC synchronizes information from the active AC. When the active AC fails, service traffic is immediately switched to the standby AC without interrupting services. This improves connection reliability. Dual-link backup or VRRP can rapidly detect whether the active AC is faulty so that the standby AC can change to active state quickly. This function ensures user service continuity. Pay attention to the following points when deploying hot-standby backup on ACs: - Hot-standby backup supports only backup between two ACs, and the models and software versions of the ACs must be the same. - WLAN service configurations (for example, WMM profile, radio profile, radio, traffic profile, security profile, and WLAN ID) of the AP connected to the active and standby ACs must be consistent on the two ACs; otherwise, the AP cannot work properly after an active/standby AC switchover.

Why cannot Easy IP be deployed with hot standby
You cannot specify the VRID in Easy IP implementation. In normal cases, the active firewall uses the IP address of its outgoing interface as the public address to set up sessions. After active/standby switchover, the standby firewall also uses the IP address of its outgoing interface as the public address. In this case, the sessions synchronized from the active firewall do not match the IP address of the outgoing interface on the standby firewall. As a result, services are interrupted.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top