Configuring the RHA NAT Utility for Various Network Setups › Example 5: Masters, Appliance, and CS are Behind Port Forwarded Firewalls

Example 5: Masters, Appliance, and CS are Behind Port Forwarded Firewalls

In this example, the network setup is such that in both sites the hosts are behind firewalls that have port forwarding enabled.

The following description explains the network setup.

• Masters are in a LAN network (LAN 1) that is behind a firewall (Firewall 1).
• Port forwarding is enabled for Firewall 1.
• The Control Service (CS) and replica are in a LAN network (LAN 2) that is behind a firewall (Firewall2).
• Port forwarding is enabled for Firewall 2.
• Both these LAN networks are connected using a public WAN.

The following diagram describes the network setup.

Port forwarding is enabled for both firewalls, so masters can access the appliance and Control Service. Similarly the Control Service and the replica can access the masters. For this setup, you can create a scenario in the following two ways.

• Using the NAT utility: Use the NAT utility either on masters or on the appliance to create an HA scenario, see either Example 1 or Example 2.
• Without using the NAT utility: Use the external IP addresses of Firewall 1 and Firewall 2 with port forwarding details to create an HA scenario.