Is it possible to cluster appliances across different subnets?

[Rob Klebanov]

We are attempting to cluster two appliances across different subnets in order to provide greater survivability. Although we were able to cluster the appliances, the manageability of the appliances has become somewhat impaired. We've opened ports 443, 22 and 2222 between the two appliances. The appliances are C350s running AsyncOS 7.1.3-010. Are we missing something?

Thanks,

Rob

[jgandla]

Rob,

Are these appliances communicating using IP addresses? If yes, in order to a join cluster,using IP addresses there must be a reverse DNS  (PTR) record configured in DNS server for the Cisco IronPort appliance.Please check that if the the reverse lookup works. If not, it might be another issue.

Regards,

Jyothi Gandla

Customer Support Engineer

[jarends]

What is exactly going wrong? This should work, just set clustercommunication to ip address to make sure dns is not the issue.

Jeroen (IronPort SE BeNeLux)

Sent from Cisco Technical Support iPhone App

[Rob Klebanov]

We are communicating by ip address. The ports we had the carrier open for communications on the appliance in the other subnet are 22, 25, 443 and 2222. Are there any further ports that need to be opened for proper operations and cluster communications?

Thanks,

Rob

[jarends]

Infact only 22 or 2222 are enough depending if you use SSH or CCS. What you can check if you are able to telnet to these ports from one of the appliance to the other.

Is there any communication during the clusterconfig add all?

Jeroen

Sent from Cisco Technical Support iPhone App