Địa chỉ MAC được sử dụng cho các địa chỉ VIP được chia sẻ giữa các thành viên nhóm cho đó có nghĩa là không có sự thay đổi địa chỉ MAC trên thất bại của một thành viên như xaTừ đầu ra này, chúng ta có thể thấy rằng có một vấn đề với các thành viên địa phương (fw1 trong ví dụ này) và tình trạng của giao diện qfe3 là. | 764 Part IV Check Point NG and Nokia IP Series Appliances qfe2 Up 0 0 0 qfe3 Down 32000 0 0 Problem Notification table Name Status Priority Verified Descr Synchronization OK 0 1618 Filter OK 0 1618 cphad OK 0 0 fwd OK 0 0 fw1 From this output we can see that there is a problem with the local member fwl in this example and that the status of interface qfe3 is down. How ClusterXL Works in Load-Sharing Mode ClusterXL in Load-Sharing mode works in a very similar way to ClusterXL in HA New mode but with the following unique distinctions The MAC address used for the VIP address is shared among cluster members for that subnet. This means that there is no MAC address change on failure of a member as far as the network equipment on the local subnet of the cluster is concerned. The MAC address of the VIP address is a multicast MAC address. in other words its first octet is an odd number . In a healthy load-sharing cluster all members of the cluster should be active and routing a portion of the active traffic. Connections through the cluster are managed on a per-connection basis. For example if a host on initiates a connection through the cluster to and member fwl takes the connection the connection will just go through member fwl unless a failure of member fw1 occurs. The connection will continue through member fw1 until the session has completed. No asymmetric routing should occur on this particular connection. The member in the cluster a new connection will go through is based on a hash of specific parameters defined in the Advanced section for ClusterXL Load Sharing see Figure . High Availability and Clustering Chapter 21 765 Figure A Load-Sharing Algorithm Hash Can Be Based on These Parameters Assuming a normal connection passing through the cluster all the packets involved will have the same hash value. For an Internet firewall this means that for a particular connection a packet .
