The following example is an example openais.conf file:

totem {
  version: 2
  token: 3000
  token_retransmits_before_loss_const: 10
  join: 60
  consensus: 1500
  vsftype: none
  max_messages: 20
  clear_node_high_bit: yes
  secauth: on
  threads: 0
  rrp_mode: passive
  interface {
    ringnumber: 0
    bindnetaddr: 192.168.122.0
    mcastaddr: 239.94.1.1
    mcastport: 5405
  }
  interface {
    ringnumber: 1
    bindnetaddr: 192.168.133.0
    mcastaddr: 239.94.2.1
    mcastport: 5405
  }
}
logging {
  to_stderr: yes
  debug: on
  timestamp: on
  to_file: no
  to_syslog: yes
  syslog_facility: daemon
}
amf {
  mode: disabled
}
service {
  ver:       0
  name:      pacemaker
  use_mgmtd: yes
}
aisexec {
  user:   root
  group:  root
}

This example assumes that 192.168.122.0 is the network address of the cluster's interface to the shared network, and that 192.168.133.0 is the network address of the interface dedicated for DRBD replication between both nodes. Do not mistakenly add host IP address in interface stanzas.

/etc/ais/authkey contains a pre-shared secrets used for mutual cluster node authentication. It should only be readable by root.

You may create an authkey file by issuing the following command without arguments:

In order to propagate the OpenAIS configuration, copy the two configuration files to the peer node in a secure fashion: