Jump to content
  • Hello visitors, welcome to the Hacker World Forum!

    Red Team 1949  (formerly CHT Attack and Defense Team) In this rapidly changing Internet era, we maintain our original intention and create the best community to jointly exchange network technologies. You can obtain hacker attack and defense skills and knowledge in the forum, or you can join our Telegram communication group to discuss and communicate in real time. All kinds of advertisements are prohibited in the forum. Please register as a registered user to check our usage and privacy policy. Thank you for your cooperation.

    TheHackerWorld Official

Recommended Posts

现有两台深信服防火墙,路由模式,主备模式配置,现在用户在主防火墙上新加了一个带外管理口,但IP并没有加-HA,导致用户使用该IP登录防火墙时有时登录到主机有时登录到备机,此时需要将该网口也添加到网口监视口。

用户的防火墙并不是直连公网,而且放在出口设备的后面,现在在主防火墙上做一条地址转换,将备机心跳口的443端口映射到主防火墙WAN口的10443端口,然后在出口设备上将住房获取的WAN口的443端口和10443端口都映射到公网上,此时通过公网的443端口即可登录主防火墙,通过10443端口即可登录备防火墙。

然后配置步骤大概如下:
1、在备防火墙上,首选将双机热备的配置同步勾选去掉,备机只有不同步配置,才可以修改双机热备的配置;
2、其次在备机上将带外管理口加入监视网口;
3、再将备机的同步配置勾选上。
4、备防火墙配置完成后,此时在主防火墙上将带外管理口加入监视网口,即可。

整个配置过程,都不会导致主备切换,且一定不要关闭任意一台防火墙双机热备。

Link to post
Link to comment
Share on other sites

 Share

discussion group

discussion group

    You don't have permission to chat.
    • Recently Browsing   0 members

      • No registered users viewing this page.
    ×
    ×
    • Create New...