Filter:

Submit Search

IMPORTANT
SNS 3.x versions have reached End of Maintenance since July 1st, 2024.
We recommend that you update your SNS firewalls to a version with maintenance to guarantee the protection of your infrastructure.

# Step 2: Configure network interfaces for communication between firewalls

## If you have chosen to create a cluster

### Main link

Interface | Main interface used to link two firewalls that make up the cluster. Select it from the list of objects in the drop-down list.
Define name | Define a customized name for the main link.
Define the IP address and network mask | Enter the IP address and subnet mask dedicated to your main link. The format is expressed in address/mask.

### Secondary link (optional)

If the firewall does not receive responses on the main link, it will attempt to connect to this secondary link. This will prevent both firewalls from switching to active/active mode if a problem arises on the main link.

Use a second communication link | Select this option to enable the fields below it and to define a secondary link for your cluster.
Interface | Secondary interface used to link both firewalls that make up the cluster. Select it from the list of objects in the drop-down list.
Define name | Define a customized name for your secondary link.
Define the IP address | Enter the IP address for your secondary link.

NOTE

In order for a link to work, both members of the cluster have to use the same interface.

## If you have chosen to join a cluster

This option assumes that a cluster has already been created beforehand, in order for a firewall to be able to join it.

If this is the case, some of the information from the first firewall created will be copied.

### Main link

Interface | Main interface used to link two firewalls that make up the cluster. This has to be the same interface that you had selected during the creation of the cluster on the first firewall.
Define the IP address and network mask | IP address and network mask dedicated to your main link. The format is expressed in address/mask. This address has to belong to the same sub-network as the one defined when you created the cluster on the first firewall.

### Secondary link (optional)

If the firewall does not receive responses on the main link, it will attempt to connect to this secondary link. This will prevent both firewalls from switching to active/active mode if a problem arises on the main link.

Use a second communication link | Select this option to enable the fields below it and to define a secondary link for your cluster. This option must only be selected if it was also selected during the creation of the cluster on the first firewall.
Interface | Secondary interface used to link both firewalls that make up the cluster. This has to be the same interface that you had selected during the creation of the cluster on the first firewall.
Define the IP address | IP address for your secondary link. This address has to belong to the same sub-network as the one defined when you created the cluster on the first firewall.

NOTE

In order for a link to work, both members of the cluster have to use the same interface.