SAG-1100 configuration description

Load balancing working principle: the main wall always detects the number of online users in the active and standby SAG. When the number of users of one SAG is less than that of another SAG,

A user landing on the main wall is redirected to the SAG with a small number of users (only the login address of the main wall needs to be provided to * * users) to ensure that the number of online users of the main wall and backup wall is the same.

Load balancer does not rely on dual-computer hot backup (VRRP) for normal operation.

The function of dual-computer hot standby (VRRP) is to solve the problem of single point of failure. When the main SAG is hung up, the service can be transparently switched to the standby SAG.

Data synchronization: manual synchronization can synchronize all data between SAG (except IP address and other configurations that cannot be the same)

Automatic synchronization can only synchronize password users and permission information in real time (departments and roles cannot be synchronized). Therefore, when configuring dual-computer hot backup or load balancer, first use manual synchronization to synchronize all services, roles, departments and other information, and then use automatic synchronization to synchronize the password users and permissions configuration added in the daily maintenance work in real time. You do not need to use the automatic synchronization feature when configuring third-party password user authentication. Automatic synchronization cannot be used when configuring certificate user authentication and two-factor user authentication

1. Internet users access the internal server traffic traversal map through SSL.

II. Configuration steps

Login method https://192.168.100.1:6443

Master device configuration VRRP steps

Standby device configuration VRRP steps

Configure load balancing for the primary device

Configure standby synchronization information

Standby data synchronization

Use load balancer to select the hot backup mode NCMA