A security administrator is establishing an automated failover sequence for an active-passive high-availability firewall pair to ensure continuous uptime during a node failure while preserving connection state tables. Place the operational failover steps in the correct chronological order from first to last.
- 1The standby node detects consecutive missed heartbeat probes from the primary node.
- 2The standby node transitions to the active role and broadcasts a Gratuitous ARP (GARP) message.
- 3The newly active node assumes the shared Virtual IP (VIP) and activates the synchronized state table.
- 4Inbound and outbound network traffic routes through the secondary firewall with zero session disruption.
Cevap
The correct sequence begins with the standby node detecting missed heartbeat probes, followed by the standby node transitioning to active and broadcasting a GARP message, then assuming the Virtual IP and activating synchronized state tables, and concluding with network traffic routing through the secondary appliance without disruption.
In stateful high availability failover, the process begins when health monitoring detects loss of heartbeat probes from the primary appliance. Next, the standby appliance promotes itself to active status and transmits a Gratuitous ARP (GARP) frame to update switch forwarding tables for the shared virtual IP (VIP). The new active appliance then assumes the VIP and applies the synchronized connection state table. Finally, network traffic transitions through the secondary firewall seamlessly.
Adım Adım Çözüm
Anahtar Kavram
Active-Passive Stateful High Availability Failover Sequence