SonicWALL E6500 manual Configuring High Availability, Configuring Advanced HA Settings

Page 34

Connect the HA ports on the Primary SonicWALL and Backup SonicWALL appliances with a CAT6-rated crossover cable (red crossover cable). The Primary and Backup SonicWALL security appliances must have a dedicated connection using the HA interface. SonicWALL recommends cross-connecting the two together using a CAT 6 crossover Ethernet cable, but a connection using a dedicated 100Mbps hub/switch is also valid.

Power up the Primary SonicWALL security appliance, and then power up the Backup SonicWALL security appliance.

Do not make any configuration changes to the Primary’s HA interface; the High Availability configuration in an upcoming step takes care of this issue. When done, disconnect the workstation.

Configuring High Availability

The first task in setting up HA after initial setup is configuring the High Availability > Settings page on the Primary SonicWALL security appliance. Once you configure HA on the Primary SonicWALL security appliance, it communicates the settings to the Backup SonicWALL security appliance.

To configure HA on the Primary SonicWALL, perform the following steps:

1.Navigate to the High Availability > Settings page.

2.Select the Enable High Availability checkbox.

3.Under SonicWALL Address Settings, type in the serial number for the Backup SonicWALL appliance.

You can find the serial number on the back of the SonicWALL security appliance, or in the System > Status screen of the backup unit. The serial number for the Primary SonicWALL is automatically populated.

4.Click Apply to retain these settings.

Configuring Advanced HA Settings

1.Navigate to the High Availability > Advanced page.

2.To configure Stateful HA, select Enable Stateful Synchronization. A dialog box is displayed with recommended settings for the Heartbeat Interval and Probe Interval fields. The settings it shows are minimum recommended values. Lower values may cause unnecessary failovers, especially when the SonicWALL is under a heavy load. You can use higher values if your SonicWALL handles a lot of network traffic. Click OK.

3.To backup the firmware and settings when you upgrade the firmware version, select Generate/Overwrite Backup Firmware and Settings When Upgrading Firmware.

4.Select the Enable Virtual MAC checkbox. Virtual MAC allows the Primary and Backup appliances to share a single MAC address. This greatly simplifies the process of updating network ARP tables and caches when a failover occurs. Only the WAN switch that the two appliances are connected to needs to be notified. All outside devices will continue to route to the single shared MAC address.

5.Optionally adjust the Heartbeat Interval to control how often the two units communicate. The default is 5000 milliseconds; the minimum recommended value is 1000 milliseconds. Less than this may cause unnecessary

SonicWALL NSA E6500 Getting Started Guide Page 33

Image 34
Contents NSA E6500 Getting Started Guide Document Contents SonicWALL NSA E6500Front SonicWALL NSA E6500Pre-Configuration Tasks This SectionCheck Package Contents Obtain Internet Service Provider ISP Information Obtain Configuration InformationAdministrator Information Registration InformationFront Panel LCD ScreenBack Panel Front Bezel Control Features LCD Control ButtonsMain Menu StatusConfigure SafeMode Configuration OptionsRestart Screen-SaverFront Bezel Configuration Example LAN IP ConfigurationRegistering Your Appliance Before You Register Registering and Licensing Your Appliance on mysonicwall.com Product RegistrationLicensing Security Services and Software Gateway ServicesSonicWALL NSA E6500 Getting Started Guide Registering a Second Appliance as a Backup Registration Next StepsDeployment Scenarios ABC Selecting a Deployment ScenarioScenario a NAT/Route Mode Gateway Scenario B State Sync Pair in NAT/Route Mode Scenario C L2 Bridge Mode Connecting the WAN Port Initial SetupSystem Requirements Connecting the LAN Port Applying PowerAccessing the Management Interface Accessing the Setup WizardConnecting to Your Network Testing Your ConnectionActivating Licenses in SonicOS Upgrading Firmware on Your SonicWALL Saving a Backup Copy of Your PreferencesObtaining the Latest Firmware Using SafeMode to Upgrade Firmware Upgrading the FirmwareAdditional Deployment Configuring a State Sync Pair in NAT/Route Mode Initial High Availability SetupConfiguring High Availability Configuring Advanced HA Settings34 Configuring a State Sync Pair in NAT/Route Mode Synchronizing Settings Adjusting High Availability Settings Synchronizing FirmwareHA License Configuration Overview Your Appliance on mysonicwall.comAssociating Pre-Registered Appliances Configuring the Primary Bridge Interface Configuring L2 Bridge ModeConnection Overview Configuring the Secondary Bridge Interface IP Assignment drop-down, select Layer 2 Bridged ModeAdditional Deployment Configuration Creating Network Access Rules An Introduction to Zones and InterfacesSonicWALL NSA E6500 Getting Started Guide 44 Creating Network Access Rules Creating a NAT Policy Configuring Address Objects Configuring NAT Policies Applying Security Services to Zones Enabling Security Services in SonicOSGateway Anti-Virus Intrusion Prevention Anti-Spyware Troubleshooting Diagnostic Tools Using Packet CaptureUsing Ping Using the Active Connections Monitor Using Log View Deployment Configuration Reference Checklist For this Task See this Chapter54 Deployment Configuration Reference Checklist Support and Training Options Customer Support Knowledge PortalUser Forums Training Related Documentation Dynamic Tooltips SonicWALL Live Product DemosSonicWALL NSA E6500 Getting Started Guide 62 SonicWALL Live Product Demos Rack Mounting Instructions Rack Mounting Instructions SSEMBLEMTHEL3LIDET2AIL  &ASTEN TWOSIDEDISCREWSWTOOTHETRAIL SSEMBLEMNNERE2AILITOO#HASSIS NSERTT#HASSISATOO&RAME  3LIDEIINNER CHANNELEINTOORAILS 68 Rack Mounting Instructions Product Safety and Regulatory Information Safety and Regulatory Information Rack Mounting the SonicWALLHinweis zur Lithiumbatterie FCC Part 15 Class a Notice Copyright Notice TrademarksPage SonicWALL NSA E6500 Getting Started Guide Page Protection AT the Speed of Business