Configuration: Failover

About the Page

The Configuration: Failover Settings page allows the admin to enable and configure the built-in Access Server failover features. This feature is a UCARP active/passive failure feature you can enable with a simple toggle button.

Important: UCARP failover doesn't function within AWS and other public cloud platforms due to network restrictions.

Redundancy Model

This section allows you to enable the LAN-based redundancy model in case of server failure. Select the option LAN model (UCARP-based failover) to enable this feature.

LAN model

Access Server failover uses the LAN redundancy model where the primary and secondary nodes have IP addresses in the same subnet and share a third, virtual IP address within that same subnet.

Important: When you install Access Server on the secondary node, ensure you designate it as a secondary node by entering “no” when prompted, "Will this be the primary Access Server node?"

Shared virtual IP addressEnter the shared, virtual IP address here, ensuring it's within the same subnet as the IP addresses of the primary and secondary nodes.
Primary NodeConfigure the details for the primary Access Server node: Hostname/IP, SSH username, SSH password (optional), and SSH port.
Secondary NodeConfigure the details for the secondary Access Server node: Hostname/IP, SSH username, SSH password (optional), and SSH port.

Validation

When you complete the details for the primary and secondary nodes, you then validate the setup. Validation results display in the table. Make sure that all four rows are marked as GOOD before proceeding to the Commit step.

Commit

The final step after validation is to click Commit and Restart.

Access Server in failover mode creates new log files in the /var/log directory titled, openvpnas-node.log. All node events will be logged here. File openvpnas.log will be used for failover events only.

UCARP relies heavily on rsync to share databases; logs of the communication and any errors save to these log files.

For more information about failover configuration, read Setting up high-availability failover mode.

Summary

The Configuration: Failover Settings page gives you the choice to enable Access Server's built-in failover feature.