Applicable Version: 02.03.0 build 307
High Availability ensures reliable and continuous central management and prevents data loss in case of hardware failures such as failure of hard disk, processor or RAM. When two CCC appliances are deployed in Active-Passive High Availability mode, the Primary Appliance manages the added Cyberoam appliances while Auxiliary CCC Appliance remains in stand-by mode, ready to take over when Primary Appliance fails.
· Time zone
· Signatures (Anti Virus, Web Categorization, IPS and Application)
· Database configurations (CCC and Managed appliances)
· Backup(s) (CCC and Managed Appliances)
· Logs (Managed Appliances)
Configure High Availability between two CCC Appliances.
· Primary and Auxiliary appliance should be of the same model.
· Both appliances must have same firmware version installed on it.
· Two separate licenses are required for both appliances.
· Cables to all the monitored ports on both the appliances must be connected.
· Connect dedicated HA link port of both the appliances with crossover cable.
· Dedicated HA link port should have a unique IP Address (same subnet) on both the appliances.
· SSH should be enabled for both the appliances on dedicated port.
You must be logged on to the Web Admin Console as an administrator with Read-Write permission for relevant feature(s).
Step 1: Enable SSH
Enable SSH on the peer CCC appliance similarly.
Dedicated HA Link Port
Select the port to be used as dedicated HA link port. HA link port is the port of the Auxiliary Appliance which is to be used for HA.
Peer HA link IP
Specify IP Address configured on the HA link port of the peer appliance
Peer Administration Port
Specify Administration Port for Auxiliary or Peer Appliance.
Peer Administration IP
Specify Administration IP Address for Auxiliary Appliance.
With this IP Address, the Admin Console of Auxiliary Appliance can be accessed. Any user accessing Web Admin Console of Auxiliary Appliance will be logged in with HA Profile and have read-only rights.
Select Ports to be monitored
Select the ports to be monitored.
The CCC appliance on which HA is configured becomes the Primary Appliance and the other appliance becomes the Auxiliary Appliance. Once HA is established between the primary and auxiliary appliance, all configuration of the Primary Appliance is synchronized with the Auxiliary Appliance and no additional configuration is required.
Step 3: Verify HA
· CCC Appliances Synchronization time depends on the volume of Database: 24 GB data can be synchronized in 20 minutes (Approximately).
· System logs are generated after HA is enabled.
· For HA is Enabled, Disabled or the state changes (Active/Standalone/Fault/), an email is sent to the administrator.
· Only Licence Information can be updated from the Auxiliary CCC Appliance.
· After disabling HA, the Auxiliary machine undergoes into factory reset condition.
· If the monitored ports are removed, the Primary CCC Appliance goes into Standalone state and the Auxiliary appliance goes into Fault state. On reconnecting the ports again, the standalone Appliance becomes Primary and Fault Appliance changes into Auxiliary.
· If both appliances are rebooted at the same time, they come up with Standalone state initially; selection of Primary and Auxiliary appliance is based on the priority decided by the firmware.
Document Version 1.0 – 06 October, 2014
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.