IP Clustering

Boost scalability and reliability

Using patented Nokia IP Clustering, multiple Nokia Firewall/VPN gateways can function as one extremely powerful gateway with one IP address. If any member of the cluster becomes unavailable, active sessions are reassigned automatically to remaining members of the cluster - with no service disruption. IP Clustering preserves active firewall sessions and shares VPN Security Associations (SAs) across all members of the cluster.

IP Clustering also provides dynamic load balancing to accommodate expansion of corporate intranets and extranets. Additional firewall/VPN appliances can be added to or removed from a cluster seamlessly without any interruption in service. As new devices are introduced, the load is automatically re-balanced among all members. What's more, it enhances the VPN application with reliability and improved VPN performance.

Features

• Allows up to four devices to act as a single network entity, sharing one internal IP address and one external IP address
• Distributes IP packet processing among all cluster-member gateway nodes to achieve equal member processing loads
• Permits clustering of up to four gateways, to create a distributed and fully redundant security architecture
• Preserves IPSec Connections - IPSec tunnels are maintained in the event of a cluster node failing
• Suits the unique needs of VPN and firewall traffic flow - contains a novel clustering protocol that minimizes overhead and failover time in case of gateway node failure or a if gateway is intentionally removed from the cluster for maintenance
• Fully supported by the Nokia Horizon Manager secure network systems-management tool