Nokia Network Voyager for IPSO 4.0 Reference Guide 209 The external router needs a static route to the internal network (192.168.1.0) with192.168.2.10 as the gateway address. The internal router needs a static route to the external network (192.168.2.0) with192.168.1.10 as the gateway address.The IP addresses shown in boldface are cluster IP addresses, addresses shared by multipleinterfaces in the cluster.IPSO uses the cluster protocol networks shown in the diagram for cluster synchronization andcluster management traffic. If a primary cluster protocol interface fails on a node, the node usesits secondary cluster protocol interface, and service is not interrupted.NoteNokia recommends that the the primary cluster protocol network be dedicated to thispurpose (as shown here). The ideal configuration is to physically separate the clusterprotocol network from the production networks. This configuration is preferable to usingseparate VLANs on one switch to separate them.Do not use a secondary cluster protocol network for production traffic. If a secondary clusterprotocol network fails but the primary remains functional, the cluster remains active buttraffic to non-cluster devices on the secondary network might fail.IPSO’s cluster management features allow you to configure firewall A and B as a single virtualdevice, and IPSO also lets you easily set up automatic configuration of cluster nodes.In this and similar diagrams, switches and hubs are not shown for the sake of simplicity.Cluster ManagementYou can manage all the nodes of a cluster simultaneously by using Cluster Voyager. This is afeature that lets you configure a cluster as a single virtual device. You can make configurationchanges once and have them take effect on all the cluster nodes. You can also use the ClusterCLI (CCLI) to manage a cluster, and much of the information in this section applies to the CCLIas well. See the CLI Reference Guide for IPSO for more information about the CCLI.The following list explains the difference between Voyager/CLI and Cluster Voyager/CCLI: Voyager and the CLI manage a single IPSO system. Cluster Voyager and the cluster CLI manage multiple clustered IPSO systems as if they are asingle system.
