This article applies to:
Question:
- In the event if source server fails, will the target servers continue filter?
Procedure:
In the event that the source R3000 unit fails, the target servers will continue to run using the last known configuration loaded from the source server. However, all dynamic authentication-based profiles and override accounts will eventually time-out, since the source R3000 server can no longer verify user credentials. When this occurs, the information on the server can no longer be trusted. In most cases, the failure of the source server can be quickly repaired, though it is possible the source server will be down for an extended period of time due to detailed troubleshooting that needs to be performed, or that the source server or component will need to be replaced due to hardware failure.
In cases in which the source R3000 server is out of commission for an extended period of time, this server or component should be replaced as soon as possible so that individual user authentication can be executed, and the ability to control the filtering cluster is continually enabled. In cases in which the R3000 will not be immediately replaced, one of the target R3000 servers should be designated as the new source server.