This FAQ describes the steps to follow to install several Panda GateDefender Integra units in high availability (router mode).
Considerations prior to installation
- It is recommendable to use switches instead of hubs, to reduce the number of collisions.
- Use gigabit Ethernet connections if the Panda GateDefender Integra unit supports them.
- Check that the network cards of the devices are operating in full-duplex mode
- Never connect the Panda GateDefender Integra units to one another.
- All network interface cards or network cards in the master unit that are going to be used must be enabled.
A network interface card could be enabled and configured in the console of the unit. However, at some time, this network interface card might not be in use or the resource to which it is connected might not be functioning and therefore, it would not have a link or connection. In this case, the unit should detect that its system has a functional problem. As a result, if the Panda GateDefender Integra device were functioning as the master unit, it would switch to the role of a slave. If it were working as a slave and an error occurred in the master unit, it could not take over the role of slave, at least until the error had been resolved.
To avoid problems of this kind, interface cards that are not going to be used should be disabled.
- Go to the Panda GateDefender Integra console for each unit. To do this, enter the configuration IP address in the browser. Then enter the access details. For instructions on how to access the console for the first time, click here.
- Assign a specific configuration IP address to each Panda GateDefender Integra unit. To do this, go to System settings, Access the console, Console access settings, Configuration IP.
NOTE: The configuration IP addresses must belong to the same logical range, as they are used to synchronize the settings between the master unit and the slave units.
- Define the high availability configuration parameters. For instructions on how to do this, click here.
- Place the Panda GateDefender Integra units between the router that connects to the external network and each of the network segments you want to protect.
- Connect one of the Panda GateDefender Integra network interface cards to each switch that defines a network segment to protect. In this way, all units will be connected independently to each network segment.
- Then connect the switches to the rest of the network.
The image below shows a scenario in which several units have been installed in high availability mode when the units operate in router mode:
- After isntalling high availability, configure the network parameters and all the modules in the master unit.
NOTE: You do not need to configure the network parameters or the modules (VPN, IPS, firewall, anti-malware and web filter, etc.) in the slave units, as all the configuration parameters in the master unit are synchronized with the slave units. For detailed information about the synchronization process, click here.
For information about the differences between router mode and transparent mode in Panda GateDefender Integra, click here.