Eicon Networks S92 Instrukcja Użytkownika Pobierz pdf (Strona 27)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 27

n 192.168.22.2(toRAS_Net)

EquipmentFaultToleranceandRedundancy:

Althoughitispossibletorunthefirewall/routingservicesonhighlysophisticated

clusterequipments,lowercostalternativesarepossible.Firstofall,machinelevel

faulttolerancecanbeestablishedbyusingDiskMirroringandUPS:

n With DiskMirroring,dataiswrittentotwoduplicatediskssimultaneously.Ifone

ofthediskdrivesfails,thesystemcaninstantlyswitchtotheotherdiskwithout

anylossofdatanordowntime.

n UPS(uninterruptiblepowersupply)isaspecialkindof powersupplythatusesa

batterytomaintainpowerintheeventofapoweroutage.Itenablesautomated

backupandshutdownproceduresincasethere'sasuddenpowerfailure.

Another thingthatcan bedoneforredundancyistomaintainanidenticalsystemasa

standbysystemforthemostcriticalfirewall androuter implemented.Thisstandby

machineshouldhavetheexactsamehardwareandsoftwareconfigurationasthe

“original”.

Toimplementastandbymachine,thefollowingstepsarerecommended:

1. Completetheconfigurationofthe“original”system.

2. Backupthesecurity/routingpolicyandobjectdatabaseaswellasanyother

exportablesecurity/routingsettingstoremovablemedias.Keeptheminasafe

andsecureyetassessableplace.

3. Producehardcopydocumentsofthesecurity/routingpolicysettings.Keepthem

inasafeandsecureyetassessableplace.

4. UseadiskcloningutilitysuchastheNortonGhostutilitytocreateanimageof

theentiresystemdisk.

5. Createtheidenticalstandbysystembyrestoringtheimagetoanidentical

computer.

6. Testthestandbysystemwhilethe“original”isoff.

Keepinmind,utilitylikeGhostwillcloneEVERYTHING,includingthesystem’s

SID.Thisisperfectlyokaslongastheoriginalsystemandthestandbysystem are

1 2 ... 22 23 24 25 26 27 28 29 30 31 32 ... 208 209

Brak uwag

Eicon Networks S92 Instrukcja Użytkownika Strona 27