Tutorial: Configuring UCARP/VRRP Failover Advanced Settings⁠

• Installed Access Servers configured for failover.

• Console access (both nodes) with root privileges.

• Proper planning to handle two failover events during the configuration.

1. Connect to the primary node console and get root privileges.

2. Adjust the VHID:

   sacli --key "ucarp.vhid" --value <NUMBER> ConfigPut
   systemctl restart openvpnas

   1. 1

      Replace <NUMBER> with a value from 1 to 255.

3. Wait a full minute for the primary node to relay the new configuration to the secondary node.

1. Connect to the secondary node console and get root privileges.

2. Restart the Access Server service:

   systemctl restart openvpnas

1. To pass additional parameters to UCARP, use the following command:

   sacli --key "ucarp.extra_parms" --value "<PARAMETERS>" ConfigPut
   systemctl restart openvpnas

   1. 1

      Replace <PARAMETERS> with the desired UCARP parameters.

Suppose, for example, you want to override the standard scripts that Access Server uses when the node becomes active or assumes the standby role. In that case, you can pass new --upscript and --downscript parameters directly to UCARP and specify new scripts instead. For example, you could copy the original ucarp_standby and ucarp_active up/down scripts in the /usr/local/openvpn_as/scripts/ directory and edit them to suit your needs. If you edit the scripts directly, they will be reset to standard whenever you upgrade or reinstall Access Server. Thus, we recommend creating copies of the up/down scripts to customize instead with the following commands.

1. Create your up/down scripts.

2. To override the default UCARP scripts:

   sacli --key "ucarp.extra_parms" --value "--upscript /root/up --downscript /root/down" ConfigPut
   systemctl restart openvpnas

3. To revert to the default scripts:

   sacli --key "ucarp.extra_parms" ConfigDel
   systemctl restart openvpnas