beautypg.com

3 before you begin, 2 device ha general – ZyXEL Communications 200 Series User Manual

Page 576

background image

Chapter 34 Device HA

ZyWALL USG 100/200 Series User’s Guide

576

Management Access

You can configure a separate management IP address for each interface. You can use it to
access the ZyWALL for management whether the ZyWALL is the master or a backup. The
management IP address should be in the same subnet as the interface IP address.

Synchronization

Use synchronization to have a backup ZyWALL copy the master ZyWALL’s configuration,
signatures (anti-virus, IDP/application patrol, and system protect), and certificates.

"

Only ZyWALLs of the same model and firmware version can synchronize.

Otherwise you must manually configure the master ZyWALL’s settings on the backup (by
editing copies of the configuration files in a text editor for example).

Finding Out More

• See

Section 5.4.8 on page 115

for related information on these screens.

• See

Section 34.8 on page 587

for device HA background/technical information.

• See

Section 6.9 on page 162

for an example of using device HA.

34.1.3 Before You Begin

• Configure a static IP address for each interface that you will have device HA monitor.

"

Subscribe to services on the backup ZyWALL before synchronizing it with the
master ZyWALL.

• Synchronization includes updates for services to which the master and backup ZyWALLs

are both subscribed. For example, a backup subscribed to IDP/AppPatrol, but not anti-
virus, gets IDP/AppPatrol updates from the master, but not anti-virus updates. It is highly
recommended to subscribe the master and backup ZyWALLs to the same services.

34.2 Device HA General

The Device HA General screen lets you enable or disable device HA, and displays which
device HA mode the ZyWALL is set to use along with a summary of the monitored interfaces.

This manual is related to the following products: