Before partnering GEO LoadMasters, backup the relevant GEO LoadMaster that has the correct/preferred configuration. This backup should then be restored to the other LoadMasters that are partnered with the original LoadMaster. This is a prerequisite because GEO partners are active-active and share the same configuration. As a result of this, you must ensure that the settings are in sync before adding a partner.

Backup and Restore the Correct Configuration

To perform a backup, follow the steps below in the WUI of the GEO LoadMaster that has the correct/preferred configuration settings:

  1. In the main menu, go to System Configuration > System Administration > Backup/Restore.

  2. Click Create Backup File. The file downloads.

    Then, on the GEO LoadMaster(s) that are partnered - follow the steps below to restore the configuration:

  3. In the main menu, go to System Configuration > System Administration > Backup/Restore.

  4. Click Choose File.
  5. Browse to and select the backup file.
  6. Select the GEO Configuration check box.
  7. Click Restore Configuration.

Now that the correct configuration is applied, the GEO LoadMasters can be partnered.

Partner the GEO LoadMasters

When configuring two GEO units as partners, the communication between the two units occurs through the Admin Default Gateway if one is configured on the Certificates & Security > Remote Access page. Otherwise, communication occurs through the system Default Gateway on the System Configuration > Network Setup > Default Gateway page. If this behavior does not match the needs of your configuration, a static route can be created to send partner responses out of the required interface.

To partner the GEO LoadMasters, follow the steps below:

  1. Select the Certificates & Security > Remote Access option from the main menu.

  2. Ensure the Allow Remote SSH Access check box is selected.
  3. Enter a Partner Shared Secret and click Set Secret.
    Note: The Partner Shared Secret must match on all GEO partners. When an incoming shared secret does not match the local Partner Shared Secret (including if only one side is providing a shared secret), a warn-level log message is recorded that says Unauthorized Remote Machine connection from <ClientIPAddress> and the connection fails.
    This secret must have a minimum of 8 and a maximum of 127 characters. The following characters are supported:
    • Numeric: 0-9
    • Uppercase alphabetic: A-Z
    • Lowercase alphabetic: a-z
    • Special characters: !"#$%&()*+,-./:;<=>?[\~]^_@`{|}

  4. In the GEO LoadMaster Partners text box, enter the IP address of the LoadMaster to partner with. If there is more than one box, enter the IP addresses but separate them with a space.
    Note: The maximum number of GEO partners allowed is 64.
  5. Click Set GEO LoadMaster Partners.
  6. Enter the port number that the LoadMasters use to communicate in the GEO LoadMaster Port text box.
  7. Click Set GEO LoadMaster Port.
  8. In the GEO update interface drop-down list, select the GEO interface that the GEO partners will communicate through.
  9. Repeat the above steps for all other GEO LoadMasters to be partnered.

GEO Partners Status

After a GEO LoadMaster is partnered, its status is indicated in the GEO Partners section of the Remote Access screen.

Figure 3-22 shows GEO Partner status of Green indicating the two partners can see each other.

Figure 3-22 also shows GEO Partner status of Red indicating the LoadMasters cannot communicate. The reasons for this include (among other possibilities); one of the partners is powered down, there may be a power outage or a cable disconnected.

A red status could also appear because when initially set, the status of the GEO Partner on the first GEO LoadMaster displays as red. When you set the GEO Partner on the second GEO LoadMaster, the status displays as green on the second LoadMaster but remains red on the first GEO LoadMaster for approximately three minutes until the first GEO LoadMaster updates. As a workaround, click Set GEO LoadMaster Partners on the first LoadMaster again and the status changes to green.

If there is a failure to update the GEO partner, the logs display an error message saying the GEO update to the partner failed. The message displays the IP address of the partner.

If you experience any issues with partnering the GEO LoadMasters, check the SSH settings and do a TCP dump to confirm that SSH connections are being sent and received by all parties.