cluster configuration auto-check enable

Function

The cluster configuration auto-check enable command enables auto-check for cluster configuration consistency.

The undo cluster configuration auto-check enable command disables auto-check for cluster configuration consistency.

Format

cluster configuration auto-check enable

undo cluster configuration auto-check enable

Parameters

None.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, the auto-check for cluster configuration consistency function is enabled.

Usage Scenario

In cluster networking, most configurations can be backed up, such as security policies and NAT policies. In normal situations, configuration modification on the master node is synchronized to other members in the cluster. However, if the backup link fails or a device powers off, configurations among cluster members will be inconsistent. Configuration inconsistency may cause service anomalies upon a device switchover. To prevent such a problem, you are advised to enable auto-check for cluster configuration consistency so that configuration consistency is checked on a regular basis.

Configuration Impact

Table 1 lists the items of the check on the configuration consistency among cluster devices.

**Table 1** Configuration consistency check items
Configuration Item	Description
Policy	Check whether the audit policy/authentication policy/NAT policy/security policy/traffic policy configurations are consistent.
Cluster	Check whether cluster-related configurations are consistent. Commands to be checked are as follows: business-group cluster detect-interval cluster id cluster track bfd-session cluster track interface cluster track ip-link cluster timer hello cluster timer holding-multiplier cluster backup node-num cluster session fast-sync enable cluster traffic-aggregation enable cluster ip-list cluster standby config enable cluster base config enable node priority ip-section cluster configuration auto-check interval cluster preempt delay bind ospf cluster adjust ospf-cost add
Hash	Checks the configuration consistency of the hash mode and hash gene next startup.
Interface	Items to be checked are as follows: Whether interfaces are consistent: The configurations are considered inconsistent as long as the interface configurations are different (the interface alias is not checked). Whether the number of VRRP groups configured on the same interfaces is consistent Whether the number of IPv4 addresses configured on the same interfaces is consistent Whether an IPSec policy applies to the same interfaces: Check whether the IPSec policy is applied to the interfaces. The contents of the IPSec policy are not checked. •Whether the ospf network-type configuration on the same interfaces is consistent
OSPF	Items to be checked are as follows: Whether the number of Networks in each OSPF process is consistent Whether each OSPF process imports direct routes Whether each OSPF process imports static routes Whether each OSPF process advertises default routes In case of OSPF process configuration inconsistency, the generated alarm and log information includes the names of the OSPF processes with different configurations.
BGP	Check whether BGP is configured. Do not check detailed BGP configurations.
License	Items to be checked are as follows: License status: activated, inactivated, invalid, or emergency Types of license control items Number of license resources Expiration date of antivirus, intrusion prevention, and URL remote query servers

Follow-up Procedure

In case of cluster configuration inconsistency, run the cluster sync config command to implement batch backup or manually change the configurations to be consistent.

Example

# Enable auto-check for cluster configuration consistency.

C_No2_M<sysname> system-view
C_No2_M[sysname] cluster configuration auto-check enable