SonicWALL E6500 manual Configuring a State Sync Pair in NAT/Route Mode

Page 35

failovers, especially when the SonicWALL is under a heavy load.

6.Set the Probe Level for the interval in seconds between communication with upstream or downstream systems. SonicWALL recommends that you set the interval for at least 5 seconds. You can set the Probe IP Address(es) on the High Availability > Monitoring screen.

7.Typically, SonicWALL recommends leaving the Failover Trigger Level (missed heart beats), Election Delay Time (seconds), and Dynamic Route Hold-Down Time fields to their default settings. These fields can be tuned later as necessary for your specific network environment.

-The Failover Trigger Level sets the number of heartbeats that can be missed before failing over.

-The Election Delay Time is the number of seconds allowed for internal processing between the two units in the HA pair before one of them takes the primary role.

-The Dynamic Route Hold-Down Time setting is used when a failover occurs on a HA pair that is using either RIP or OSPF dynamic routing. When a failover occurs, Dynamic Route Hold-Down Time is the number of seconds the newly-active appliance keeps the dynamic routes it had previously learned in its route table. During this time, the newly-active appliance relearns the dynamic routes in the network. When the Dynamic Route Hold-Down Time duration expires, it deletes the old routes and implements the new routes it has learned from RIP or OSPF. The default value is

45 seconds. In large or complex networks, a larger value may improve network stability during a failover.

8.Click the Include Certificates/Keys checkbox to have the appliances synchronize all certificates and keys.

9.Click Synchronize Settings to synchronize the settings between the Primary and Backup appliances.

10.Click Synchronize Firmware if you previously uploaded new firmware to your Primary unit while the Secondary unit was offline, and it is now online and ready to upgrade to the new firmware. Synchronize Firmware is typically used after taking your Secondary appliance offline while you test a new firmware version on the Primary unit before upgrading both units to it.

11.Click Apply to retain the settings on this screen.

Page 34 Configuring a State Sync Pair in NAT/Route Mode

Image 35
Contents NSA E6500 Getting Started Guide SonicWALL NSA E6500 Document ContentsSonicWALL NSA E6500 FrontThis Section Pre-Configuration TasksCheck Package Contents Registration Information Obtain Configuration InformationAdministrator Information Obtain Internet Service Provider ISP InformationLCD Screen Front PanelBack Panel LCD Control Buttons Front Bezel Control FeaturesStatus Main MenuConfigure Screen-Saver Configuration OptionsRestart SafeModeLAN IP Configuration Front Bezel Configuration ExampleRegistering Your Appliance Before You Register Product Registration Registering and Licensing Your Appliance on mysonicwall.comGateway Services Licensing Security Services and SoftwareSonicWALL NSA E6500 Getting Started Guide Registration Next Steps Registering a Second Appliance as a BackupDeployment Scenarios Selecting a Deployment Scenario ABCScenario a NAT/Route Mode Gateway Scenario B State Sync Pair in NAT/Route Mode Scenario C L2 Bridge Mode System Requirements Initial SetupConnecting the WAN Port Applying Power Connecting the LAN PortAccessing the Setup Wizard Accessing the Management InterfaceTesting Your Connection Connecting to Your NetworkActivating Licenses in SonicOS Obtaining the Latest Firmware Saving a Backup Copy of Your PreferencesUpgrading Firmware on Your SonicWALL Upgrading the Firmware Using SafeMode to Upgrade FirmwareAdditional Deployment Initial High Availability Setup Configuring a State Sync Pair in NAT/Route ModeConfiguring Advanced HA Settings Configuring High Availability34 Configuring a State Sync Pair in NAT/Route Mode Synchronizing Settings Synchronizing Firmware Adjusting High Availability SettingsYour Appliance on mysonicwall.com HA License Configuration OverviewAssociating Pre-Registered Appliances Connection Overview Configuring L2 Bridge ModeConfiguring the Primary Bridge Interface IP Assignment drop-down, select Layer 2 Bridged Mode Configuring the Secondary Bridge InterfaceAdditional Deployment Configuration An Introduction to Zones and Interfaces Creating Network Access RulesSonicWALL NSA E6500 Getting Started Guide 44 Creating Network Access Rules Creating a NAT Policy Configuring Address Objects Configuring NAT Policies Gateway Anti-Virus Intrusion Prevention Anti-Spyware Enabling Security Services in SonicOSApplying Security Services to Zones Using Packet Capture Troubleshooting Diagnostic ToolsUsing Ping Using the Active Connections Monitor Using Log View For this Task See this Chapter Deployment Configuration Reference Checklist54 Deployment Configuration Reference Checklist Support and Training Options Knowledge Portal Customer SupportUser Forums Training Related Documentation SonicWALL Live Product Demos Dynamic TooltipsSonicWALL NSA E6500 Getting Started Guide 62 SonicWALL Live Product Demos Rack Mounting Instructions Rack Mounting Instructions SSEMBLEMTHEL3LIDET2AIL  &ASTEN TWOSIDEDISCREWSWTOOTHETRAIL SSEMBLEMNNERE2AILITOO#HASSIS NSERTT#HASSISATOO&RAME  3LIDEIINNER CHANNELEINTOORAILS 68 Rack Mounting Instructions Product Safety and Regulatory Information Rack Mounting the SonicWALL Safety and Regulatory InformationHinweis zur Lithiumbatterie FCC Part 15 Class a Notice Trademarks Copyright NoticePage SonicWALL NSA E6500 Getting Started Guide Page Protection AT the Speed of Business