BGP + HSRP Active Passive failover solution

Hi all,
I would like to know how to configure an Active Passive failover solution using BGP + HSRP(with ip sla to track line up/down) in 2x Cisco CPE.
For example the IP assignment as below:
Primary Router:-
WAN IP: 10.10.10.2/30; GW: 10.10.10.1/30
LAN IP(Primary): 172.16.1.1/24
LAN IP(Secondary): 12.12.12.1/24
HSRP Virtual IP: 172.16.1.3
Backup Router:-
WAN IP: 10.10.10.6/30; GW: 10.10.10.5/30
LAN IP(Primary): 172.16.1.2/24
LAN IP(Secondary): 12.12.12.2/24
HSRP Virtual IP: 172.16.1.3
BGP info:
AS No: 12345
Remote-AS: 67890
Password: abcde
There will be an unmanaged switch connect to these 2 routers LAN interface and my PC will connect to this switch to perform failover test.
Appreciate if anyone can share his/her knowledge and guide me on this.
Let me know if the details above is insufficient.
Thanks.
CS

Hi,
As per my understaing few things are missing here:
First you mentioned only 1 virtual IP here from primary LAN Subnet, what about secondary LAN Subnet?
Secondly, you need to advertise something ( atlest 1 subnet) to BGP, that will show in remote side routing table.
1 IP SLA and 1 tracking object should be configure also.
Thanks,
SAP

Similar Messages

Active/passive failover solution using Oracle 10gR2

Hi,
We have 2 windows 2003 servers clustered together using Microsoft Clustering Services.
ORACLE_HOME on D: drive on both servers
Data drive (P:) will be failing across to each server.
I want to implement an active/passive failover solution using Oracle 10gR2.
One option is to use Oracle Failsafe,
But Are there any best practice for Failsafe which we is more reliable?
Thanks

More inof here:
http://www.oracle.com/technology/tech/windows/failsafe/index.html

Active-Passive Failover cluster in Windows Server 2008 R2

Hi,
As per the client requirements, I build an active-passive Oracle 11g R2 database cluster in Windows Server 2008 R2.
(Used Microsoft cluster as Client don't have Fail Safe licence)
As per the configuration, I follow the below mentioned steps:
a)OS vendor configured Active-Passive Windows Cluster
b)Installed Oracle 11g R2 on both the nodes with same ORACLE_HOME name
c)Create Listener and configured it with cluster IP in Node1
d)Create Database from Node1. Physical files location are all in Storage
e)Create Oracle Service with the same name in the 2nd node and copy all the files like spfile,tnsnames.ora,listener.ora,password file to Node2
f)Configure Listener with the same Oracle SID.
g)Test database failover from Node2 with Listener registration
h)Open the Windows Failover Manager to configure the Oracle Database and Listener Service in the Cluster Group
Now I am facing problem by moving Cluster Group movement. Whenever trying to moving the group, Listerner service is not getting up by Cluster Manager as quorum is not included in the group and that quorum disk is not moving in the failover node with the Oracle Cluster Group. As per my understanding Quorum having information of Cluster IP which has been configured with Listener.
But when I am shutdown one node, then in the other node all the resources successfully moving and cluster able to online all the resources. I guess at that time Quorum is also moving and thus cluster can able to make Listener online.
Please suggest how to resolve this issue. Means how can I make Listener up instead having any dependencies with Quorum in the fail over node?
Thanks a lot for your help.

hello
I was going through your post and i am also doing the same thing here at our organisation for Oracle 10g R2
Can you pls send me any docs u r having for configuration of Oracle in windows clusters .
And, can you pls elaborate on this point
e)Create Oracle Service with the same name in the 2nd node and copy all the files like spfile,tnsnames.ora,listener.ora,password file to Node2.
Pls send me the details at [email protected] or you can contact me at 08054641476.
Thanks in advance.

SQL server 2012 active\passive or active\active cluster

Hi all,
I will two SQL 2012 servers in a cluster, what will be the best mode: active\passive or active\active knowing that will have one clustered instance. When we use active\passive and when to use active\active? Do we use active\active if we have multiple clustered
sql instances only?
Note: the two-node sql cluster will be installed on Hyper-V 2012 R2 cluster

Download this Microsoft whitepaper about Windows 2008 R2 Failover cluster. Here's an excerpt:
Active/Active failover cluster model. All nodes in the failover cluster are functioning and serving clients. If a node fails, the
resource will move to another node and continue to function normally, assuming that the new server has enough capacity to handle the additional workload.
Active/Passive failover cluster model. One node in the failover cluster typically sits idle until a failover occurs. After a failover,
this passive node becomes active and provides services to clients. Because it was passive, it presumably has enough capacity to serve the failed-over application without performance degradation.
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&ved=0CB4QFjAA&url=http%3A%2F%2Fdownload.microsoft.com%2Fdownload%2FF%2F2%2F1%2FF2146213-4AC0-4C50-B69A-12428FF0B077%2FWS08%2520R2%2520Failover%2520Clustering%2520White%2520Paper.doc&ei=9OzIVL-IMcPjoASv9oDICQ&usg=AFQjCNG7uT9nBQhX2P7wOJiIfzajXKttzg&bvm=bv.84607526,d.cGU
Satish Kartan www.sqlfood.com

How to know the Cluster is active active or Active Passive

Friends
A quick and easy Question. I am pretty new to Clustering. How do I know the cluster is whether active active or active passive?

Hi Prasant,
Simple two-node, for Active-Passive cluster, only a single SQL Server instance is running. For Active-Active cluster, both SQL Server instances are running on each physical node of the cluster.
Generally, we can use one of the following options to identify the active node in a SQL Active-Passive Failover Cluster. For more details, please review this
blog.
1. In “Failover Cluster Management” console, you can see the current active node under the label “Current Owner” from summary screen.
2. Run the following T-SQL in SQL Server Management studio.
SELECT SERVERPROPERTY('ComputerNamePhysicalNetBIOS')
There is also a similar thread for your reference.
https://social.technet.microsoft.com/Forums/en-US/be030e90-f41e-4d42-89e0-ae2a740fbb54/how-to-determine-a-node-is-active-or-passive?forum=sqldisasterrecovery
Thanks,
Lydia Zhang

Active/Passive Solution With 9iAS R2

Hi All,
Question about active/passive 9i AS R2 solutions. My developers is looking for a solution where they can deploy OC4J packages on one node(the passive node) and then when verified make it the active node and deploy to the other node. The system contains 2 webcache servers, two single node 9i AS servers(only one node is used) and a db server 9i R2 with the Infrastructure db on it and prod database. OID is on a single node and we do not use SSO, on the same node we have reports and discoverer.
So, I want to go from a single node iAS solution to using both nodes where one is passive and is used to deploy new code on and to verify it, and then switch it to be the active node. Is there a way to do this without clustering the AS nodes and how would that be configured. If making this on two single nodes is not possible, how would a two node cluster config with manual switch look like. Or, is there an other way to do this?
Regards,
Krister

Uhm... you can do something like you say with WebCache.
Try this:
- set up a Webcache wich serves the 2 application server
- in Webcache set up the two application server as origin servers for your site
- map only one of the origin server to your site (site-to-server mapping) in WebCache
Then, you can use one application server as a pre-production environment, and the other as a production environment.
When you want to switch the two environments, all you have to do is to reconfigure the site-to-server mapping in Webcache and restart webcache.
Take in mind that by doing this, all the open sessions to your web application will die.
I think that a more usual test environment and production environment is safer.
Bye,
Andrea

Strickt redundancy/strickt failover(active/passive) or active/active operation?

Hi,
i couldn't find a documentation which states clearly how traffic flows from the mezanina adapter ports to FEX adapters. We have the A side and the B-side. that is for both fabric interconnecto and FEX adapters. does the B side actively send and recieve traffic(active/active) or is it a redundant setting (replica of side A) waiting idle till something goes wrong with side A (active/passive). if it is active/active, how is loadbalancing algorithem working at server adapter to pick say the B side as opposed to the A-side? please put it clearly. all the discussions i see talk about how traffic is forwarded on the A side and they explain failure scenarios which only makes sense when the B-side is just redundant and standby. please let me know.
Thanks,
Kerim

Hi Abhinav,
thanks! this made it a bit clearer.you saied both fabrics (A & B) are active/active physically and not logically.let me see if i get this right. for a mac address or veth port which is currentlyt on fabric A to be seen on fabric B, there has to be failure on fabric A and vice versa.
the other thing i read on a documentation that for every vEth port on FI(fabric Interconnect) A, a replica will be created on FI-B which will be just sitting there waiting for failure on fabric A. is this true? if so is the reverse also true i.e for every active vEth port on FI-B a replica will be created on FI-A waiting for failure on fabric B. what does this say about mac ddress table size about the FI? please let me know.
thanks,
Kerim

Active Passive Vs Active Active

Hi All,
How much more effort it requires to failover or get up and ready with passive node, if Active Passive strategy is followed rather than Active Active just for saving on licenses.
Note : High availability is not a concern.
thanks,

Be clear what the policy means. RAC is normally considered an ACTIVE/ACTIVE solution since all nodes in RAC are actively processing. In an ACTIVE/PASSIVE setup by contrast one or more nodes are actively processing whilst others are standing by ready to take over the workload in the event of failure of the primary. Physical Standby, Failsafe and non-oracle clusters are often Active/Passive. You may also check if the policy comes from a sqlserver centric view of the world where you split the sqlserver databases between different nodes, so that although for any given sql database the solution is active passive, you don't 'waste' the resources of some nodes just waiting to take over, but rather run other databases on them.
Your description of ACTIVE/ACTIVE seems to rather correspond to a Stretch Cluster http://www.oracle.com/technology/deploy/availability/pdf/1126_Ray_WP.pdf has a good overview of what this means. I'd be surprised if the policy was really to put all databases on just about the most expensive hardware and software solution available, but I'm used to surprises in the world of corporate policies.
Niall
user526463 wrote:
My company was recently purchased. The new company has a "policy" about any High Availability database be an Active\Active configuration. We have in the past used active\passive RAC installs with each site have multiple active RAC nodes. I am interested in see what the cases are for a true Active\Active environment where there will be multiple RAC nodes in each "cluster" and multiple databases (disk) which are actively written to, then synchronized. (As apposed to a couple mutinode RAC setups with a primary\standby database)
Any white papers or best practice document references would be great. I'd hate to do this just case of some policy.
Thanks

Active Active link with Active Passive Firewall

Hi
I am planning to migrate my Active passive links to Active Active links with a link load balancer. But the firewalls which are behind routers are planned to be in Acive-Passive.
Can we understand how the firewall will respond for the response traffic will that forward to the same interface where the request has come from.
How about the default gateway Should we have two default gateways. In that case how will this work

Raaj,
could you please share network diagram, most probably HSRP or GLBP is an appropriate solution.
Sajid Ali Pathan

3 Node ASA active/passive Cluster possible ?

Hi,
we operate an active/passive cluster with 2 ASA5510 in Routed Mode.
Is it possible to add another node, so that we have one active and two standby nodes in the cluster?
Unfortunately, I have found no documentation on this .... The data sheet say only up to 10 nodes can be mentioned as a VPN load balancing cluster.
best regards
Andreas

For failover you cannot implement more than two ASAs as a cluster. Either for Active/Standby or Active/Active solutions
Tariq Bader
Sent from Cisco Technical Support Android App

Can you Setup a Active Passive DFS namespace in the same site

Hi,
I would like to use DFS for profile replication. I know MS doesn't recommend it, but was wondering if you could setup DFS namespace in an Active/ passive contests in the same AD site. I think or what I can understand of DFS is that if the Fileserver is in
the same site it would select it randomly and you cant specify which server is the primary.
Basically what I want is to have users only access File server 1, but if this file server 1 goes down to be redirected to file server 2.
Thanks,
Shaun

You could have a read-only Replica but that really doesn't help you in terms of the automatic redirection thing. You could also set up a 2-node replication group and disable the referral for the folder(s) on one node like below:
However the "failover" would be manually Enabling, which I doubt fits the bill.
Otherwise, I'm not aware of any configuration of DFSR that allows you to do what you're talking about (maybe someone else will correct me.) HOWEVER, I suspect a design that fits your use case may be to create a DFS namespace that runs
on a file server cluster. That way if Node1 goes down, the cluster fails over, and the data continues to be available on Node2 when accessed via DFS.
If interested, there are a couple ways to approach DFS in combination with a cluster.
Configuration1: The cluster is configured to host the namespace as well as the folder targets (where the actual data is). CAVEAT - The cluster can only be configured as a standalone cluster.
Configuration2: Create a domain DFS namespace that resides on other servers.
\\domain\DFSRoot for example. Then point each of the leaves/folder targets to clustered shares. So you'd create a subfolder called "Profiles" that points to the clustered share that houses the profiles.
Just an idea. Hope this helps.

Non-domain user authentication against SSAS on Active/Passive Cluster

Hello,
We have an Active/Passive SQL Server setup (DB1 & DB2 Servers) connected to a cluster for SQL & SSAS. I have a web server not on the same domain that I am trying to authenticate with SSAS. This works OK if I set the website to impersonate
myUser and I add local account myUser as an Admin on SSAS for the active server (DB1). But when this fails over to DB2 then it fails to authenticate. SSAS won't allow us to add myUser as an admin for local accounts on both DB1 & DB2 as it errors
adding the second one. Could anyone advise how such a scenario should be approached?
We have tried creating a domain user too which DB1 & DB2 can of course both share but I don't think the web server can impersonate this with being not part of the domain.
Thanks.

Hi Jcorker,
According to your description, you need to access the SQL Serve Analysis Services database which is configured as cluster for SQL & SSAS from another domain, right?
In SSAS we can use the solution below achieve the requirement.
1.Create new domain account and impersonate the web site with that.
2.Create local user account on the analysis service with same exact username/password as like domain account created in the previous step.
However, you cannot create a local account with the same name on both servers. I have tested it on my local environemnt, we can create the same local account with the same name on both servers. In your scenario, if DB1 and DB2 on different server, you can
create a local account with the same name on both servers. Please post the detail errors, so that we can make further analysis.
Besides, SSAS only allows users of the same domain or trusted domains and it does not allow users from any domain except from these two. You can configure the trust relationship between the domains.
http://technet.microsoft.com/en-us/library/cc961481.aspx
Regards,
Charlie Liao
If you have any feedback on our support, please click
here.
Charlie Liao
TechNet Community Support

How to : Active/Passive and Active/Active Enterprise manager R3 (10.2.0.3)

Soon I will implement the above named version of EMR3 on a AIX 5.3.3 platform. I have a couple of questions about active/passive and active/active implementations. These are the questions I have:
Basic install:
Implementing 10.2.0.2 and upgrading to 10.2.0.3 works fine on host 1234 (already done that).
Does anyone have experience with an implementation on host 1234', in other words, a virtual host (different IP-numbers on the same ethernet adapter)?
Active/passive
Lets assume that the implementation on server 1234' works fine, how can I realise a cold failover situation? On AIX you can move/transport the volume group to the failover server, activate the volume group, mount your filesystems and the application is running again. This is the theory but ....
Active/Active
If this 'basic' install is done, can someone briefly tell me how to migrate the OMS repository to a RAC implementation? Is this possible or do I need to setup the repository for the OMS at the start of the implementation. Has anyone experience with using virtual hostnames, RAC and EMR3.
Can anyone tell me where I can find some good documentation instead of reading all these thousands of pages of Oracle's guides.
Help would be appreciated.
Message was edited by:
Jeroen Udo

Soon I will implement the above named version of EMR3 on a AIX 5.3.3 platform. I have a couple of questions about active/passive and active/active implementations. These are the questions I have:
Basic install:
Implementing 10.2.0.2 and upgrading to 10.2.0.3 works fine on host 1234 (already done that).
Does anyone have experience with an implementation on host 1234', in other words, a virtual host (different IP-numbers on the same ethernet adapter)?
Active/passive
Lets assume that the implementation on server 1234' works fine, how can I realise a cold failover situation? On AIX you can move/transport the volume group to the failover server, activate the volume group, mount your filesystems and the application is running again. This is the theory but ....
Active/Active
If this 'basic' install is done, can someone briefly tell me how to migrate the OMS repository to a RAC implementation? Is this possible or do I need to setup the repository for the OMS at the start of the implementation. Has anyone experience with using virtual hostnames, RAC and EMR3.
Can anyone tell me where I can find some good documentation instead of reading all these thousands of pages of Oracle's guides.
Help would be appreciated.
Message was edited by:
Jeroen Udo

Hyperion Essbase 11.1.2 active/passive Clustering

Hello,
Has anyone successfully clustered Essbase 11.1.2 in an active/passive configuration? If yes, I have a few questions as I do not believe that the documentation is very clear on a few critical areas. I have already installed and configured Essbase on the first server and set the cluster name to EssbaseCluster-1 (I also shared out the essbaseserver1 directory so the second essbase server can access it). I also went and installed and configured Essbase on the second server (during the configuration, I configured to be a member of EssbaseCluster-1. I am not sure if I am supposed to put the share location in the full arborpath location (I did not)). When configuring the opmn.xml file the documentation states the following (from http://download.oracle.com/docs/cd/E17236_01/epm.1112/epm_install.pdf pg 172):
Setting Up Active-Passive Essbase Clusters
If you set up an active-passive Essbase cluster using EPM System Configurator, you must perform
additional steps to set up Essbase failover on both nodes of the cluster.
ä To complete the setup of the Essbase active-passive cluster:
1 Update MIDDLEWARE_HOME/user_projects/epmsystem1/config/OPMN/opmn/
opmn.xml to specify the OPMN service failover network topology. In the <notificationserver
interface> section, add the <topology> section. For example:
<notification-server interface="any">
<ipaddr remote="*hostName*" />
<port local="*portNumber*" remote="*portNumber*" />
<ssl enabled="true" wallet-file="\Oracle\Middleware\user_projects
\epmsystem1\config\OPMN\opmn\wallet"/>
<topology>
<nodes list="*nodeName1:nodePort1,nodeName2:nodePort2*"/>
</topology>
</notification-server>
2 In the same section of the file, update hostName to match the nodeName for this machine.
Oracle recommends using a fully qualified name. "
So, with these instructions, I put the following into my own opmn.xml file on both of the essbase servers. (epmapp1 and epmdata1 are my two essbase servers, they are running on the default port 1423)
<notification-server interface="any">
<ipaddr remote="epmapp1"/>
<port local="*1423*" remote="*1423*"/>
<ssl enabled="false" wallet-file="E:\Oracle\Middleware\user_projects\epmsystem1\config\OPMN\opmn\wallet"/>
     <topology>
     <nodes list="*epmapp1:1423,epmdata1:1423*"/>
     </topology>
</notification-server>
When I go to start the essbase cluster through the opmnctl startproc command, I recieve the following. Anyone know what I am missing?
C:\Users\Administrator>echo %ORACLE_INSTANCE%
E:\Oracle\Middleware\user_projects\epmsystem1
C:\Users\Administrator>opmnctl startproc ias-component=EssbaseCluster-1
opmnctl startproc: starting opmn managed processes...
===============================================================================
opmn id=epmapp1:1423
no processes or applications matched this request
C:\Users\Administrator>
Edited by: 789316 on Nov 4, 2010 12:00 PM

Have you been able to resolve this issue?.. I am also facing the same problem..
Thanks
Bala

Cisco ASA Active standby failover problem

We have configured ASA Active standby failover with ASA5505 . When primary unit power off, secondary unit became active. when primary unit power on, then primary unit is becoming active again. i think for active standby setup there is no preemption. The real issue is when primary ASA became active after power on all the external connectivity getting down. Please see the below config,
ASA01# show run
ASA01# show running-config
: Saved
ASA Version 8.2(5)
hostname ASA01
enable password PVSASRJovmamnVkD encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
name 192.168.1.1 MPLS_Router description MPLS_Router
name 192.168.2.1 SCADA_Router description SCADA_Router
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
switchport access vlan 2
interface Ethernet0/3
interface Ethernet0/4
switchport access vlan 3
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif inside
security-level 100
ip address 192.168.3.8 255.255.255.0 standby 192.168.3.9
interface Vlan2
nameif outside
security-level 0
ip address 192.168.1.8 255.255.255.0 standby 192.168.1.9
interface Vlan3
description LAN Failover Interface
ftp mode passive
clock timezone AST 3
access-list inside_access_in extended permit icmp any any
access-list inside_access_in extended permit ip any any
access-list inside_access_in extended permit ip any host MPLS_Router
access-list outside_access_in extended permit icmp any any
access-list outside_access_in extended permit ip any any
access-list outside_access_in extended permit ip any 192.168.2.0 255.255.255.0
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
failover
failover lan unit primary
failover lan interface FAILOVER Vlan3
failover key *****
failover interface ip FAILOVER 10.1.1.1 255.255.255.0 standby 10.1.1.2
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
access-group inside_access_in in interface inside
access-group outside_access_in in interface outside
route-map Route_Out permit 1
match ip address inside_access_in outside_access_in
match interface inside
route outside 0.0.0.0 0.0.0.0 MPLS_Router 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.1.0 255.255.255.0 inside
http 192.168.2.0 255.255.255.0 inside
http authentication-certificate inside
http authentication-certificate outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet 192.168.2.0 255.255.255.0 inside
telnet 192.168.1.0 255.255.255.0 outside
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
username admin password eY/fQXw7Ure8Qrz7 encrypted
prompt hostname context
no call-home reporting anonymous
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:1a8e46a787aa78502ffd881ab62d1c31
: end

I suggest removing the failover configuration on both units and then re-add them, and then test.
Primary
failover lan interface FAILOVER Vlan3
failover interface ip FAILOVER 10.1.1.1 255.255.255.0 standby 10.1.1.2
failover lan unit primary
failover key KEY
failover
Secondary
failover lan interface FAILOVER Vlan3
failover interface ip FAILOVER 10.1.1.1 255.255.255.0 standby 10.1.1.2
failover lan unit secondary
failover key KEY
failover
Please remember to select a correct answer and rate helpful posts

BGP + HSRP Active Passive failover solution

Similar Messages

Maybe you are looking for