Failover Relay Question

We use automatic relay selection in our environment with a failover relay set for our internet/external relays. This all works well as expected. My question is, is there a way to force the client to leverage the failover relay quicker when the vpn is dropped ? For example if the clients fails to connect to the first 2 relays in the relays.dat, can it be forced to connect to the failover relay.
The majority of time, the client will failover within 20 mins, but on occasions we’ve seen it take ~3 hours …
Is there a client setting I’m unaware of ? Platform version is 9.2.5.130

I would recommend taking a gander at the relay autoselection failsafe controls: https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/Autoselection%20Failsafe%20Controls

Changing _BESClient_RelaySelect_ResistFailureIntervalSeconds may help with how fast a machine starts searching for another relay.

Are you using Seek/Affiliation groups for relay selection or are you just letting them pick any relay?

It might be wise to setup seek/affiliation groups so that the clients only look at a subset of relays instead of every relay in the environment. More instructions on that here: https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/Relay%20Affiliation

1 Like