Is RSA secure ID appliance replication from primary appliance to replica appliance rely only on primary LAN?

[JUNXIAZHANG]

We have RSA Authentication manager version 8.2.1 installed on three RSA hardware appliances(RSA SecureID AM8 Intel Appliance 250), one primary and two replica appliances.Each appliance has dual LAN and connected to two different local area networks.
All eth0 of appliances are connected to LAN A and all eth1 are connected to LAN B.IP address of eth0 is set as primary IP address and eth1 address as Alternative IP Address in Advanced Settings
under Security Console.

One day, LAN A was down and we noticed that replications from primary to replica appliances were not success.At that time LAN B was still up and we can authenticate through LAN B without a problem.
After LAN A was up, the replication process success again.Can I assume that RSA replication process rely only on primary IP address(LAN A)?.Is it the normal characteristics of RSA appliances?. If not,
I would like to know how to setup the appliances so that they can still replicate through LAN B, if primary LAN A is down.

[SGTech · Accepted solution]

Hi JUNXIA ZHANG,

I will try to answer your question up to my knowledge.

Alternative IP is more for authentication purpose. So replication will happen via primary interface.

Hi RSA Team,

Please correct me if I am wrong.

thanks

Rajesh

[PiersB]

The comment from Rajesh (MTech Products) is correct. The Alternate IP Addresses are provided to agent's and used as an alternate address to which authentication requests can be sent.

Some customers use the secondary NIC for administrative or restricted SSH access. For this reason, the system, by default, does not configure routing of network traffic between the two NICs. This is certainly something that could be configured.

[JUNXIAZHANG]

Hi Piers Bowness,

Thank you for the information.

[JUNXIAZHANG]

Hi Rajesh,

Thank you for the information.