Configuring a Backup Mode

Procedure

• Enable quick session synchronization in the system view.

  cluster session fast-sync enable

  By default, the quick session synchronization function is disabled.

  After the quick session synchronization function is enabled for the cluster, the TCP flow backup starts before the flow establishment; otherwise, the backup starts after the TCP flow establishment.

  After enabling the cluster traffic aggregation function, you must enable the fast session synchronization function. If the forward and return paths are inconsistent, you must enable the fast session synchronization function.

• Enable automatic backup from a peer upon restart in the system view.

  cluster base config enable

  In the cluster networking, if one FW restarts, other FWs process all services during the restart. In this period, the FW that processes the services may have configurations added, deleted, or modified. If you want the restarted FW to automatically synchronize the configuration from the FW that processes the services, run the cluster base config enable command, so that the FW restarts with the basic cluster configuration and synchronizes other service configurations from the master device.

  By default, this function is disabled. Devices restart with the configuration in the configuration file.

  

  Ensure that the cluster base config enable command is configured on every cluster member. If the command is configured only on one FW, the cluster configuration backup function does not work.

• Enable certain configuration functions for management backup devices in the system view.

  cluster standby config enable

  By default, the commands that support configuration backup can be configured only on the management master device in a cluster. After the configurations are complete, the system synchronizes the configurations to other member devices in real time. You cannot directly perform configurations on the management backup device. After the commands in this section are run on the management master device, they can also be configured on the management backup device. After the configurations are complete, the system also synchronizes the configurations to other member devices in real time. For features that support configuration backup in a cluster, see Table 1.

  If both the master device and a backup device have a command configured, the latter one will overwrite the previous one.

• Configure the function for filtering session backup information.

  After a cluster is built, the session backup traffic between member devices is heavy. If the actual link bandwidth is insufficient, the function for filtering session backup information can be used to back up only required sessions, reducing the bandwidth for session backup. Note that after the function for filtering session backup information is configured, services may be temporarily interrupted due to incomplete backup of session entries when a fault occurs.

  By default, the function is disabled.

  1. Run the cluster session-sync filter enable command in the system view to enable the function for filtering cluster session information.
  2. Run the cluster session-sync filter id id { exclude | include } { protocol { protocol-type [ port port-number ] | protocol-number } | existed-time existed-time } * command to configure conditions for filtering session backup information.
• Run the cluster sync config command in the user view to trigger the batch backup function of a cluster.

  Generally, the configurations and service entries of cluster members are consistent. If the automatic backup function of the cluster cannot ensure the synchronization of the configurations and service entries, you can run this command to manually back them up in batches. For example, during the establishment of a cluster, configurations or service entries may be inconsistent between devices. In this case, you can run this command to perform batch backup.