Chapter 26 Device HA

26.3.1 Configuring Active-Passive Mode Device HA

The Device HA Active-Passive Mode screen lets you configure general active-passive mode device HA settings, view and manage the list of monitored interfaces, and synchronize backup ZyWALLs. To access this screen, click Configuration > Device HA > Active-Passive Mode.

The following table describes the labels in this screen. See Section 26.4 on page 365 for more information as well.

Table 130 Configuration > Device HA > Active-Passive Mode

LABEL

DESCRIPTION

Show Advanced

Click this button to display a greater or lesser number of configuration fields.

Settings / Hide

 

Advanced

 

Settings

 

 

 

Device Role

Select the device HA role that the ZyWALL plays in the virtual router. Choices are:

 

Master - This ZyWALL is the master ZyWALL in the virtual router. This ZyWALL uses the

 

virtual IP address for each monitored interface.

 

Note: Do not set this field to Master for two or more ZyWALLs in the same virtual router

 

(same cluster ID).

 

Backup - This ZyWALL is a backup ZyWALL in the virtual router. This ZyWALL does not

 

use any of the virtual IP addresses.

 

 

Priority

This field is available for a backup ZyWALL. Type the priority of the backup ZyWALL. The

 

backup ZyWALL with the highest value takes over the role of the master ZyWALL if the

 

master ZyWALL becomes unavailable. The priority must be between 1 and 254. (The

 

master interface has priority 255.)

 

 

Enable

This field is available for a backup ZyWALL. Select this if this ZyWALL should become the

Preemption

master ZyWALL if a lower-priority ZyWALL is the master when this one is enabled. (If the

 

role is master, the ZyWALL preempts by default.)

 

 

Cluster Settings

 

 

 

Cluster ID

Type the cluster ID number. A virtual router consists of a master ZyWALL and all of its

 

backup ZyWALLs. If you have multiple ZyWALL virtual routers on your network, use a

 

different cluster ID for each virtual router.

 

 

Authentication

Select the authentication method the virtual router uses. Every interface in a virtual

 

router must use the same authentication method and password. Choices are:

 

None - this virtual router does not use any authentication method.

 

Text - this virtual router uses a plain text password for authentication. Type the

 

password in the field next to the radio button. The password can consist of alphanumeric

 

characters, the underscore, and some punctuation marks (+-/*= :; .! @$&%#~ ‘ \ () ),

 

and it can be up to eight characters long.

 

IP AH (MD5) - this virtual router uses an encrypted MD5 password for authentication.

 

Type the password in the field next to the radio button. The password can consist of

 

alphanumeric characters, the underscore, and some punctuation marks (+-/*= :; .!

 

@$&%#~ ‘ \ () ), and it can be up to eight characters long.

 

See Authentication Types on page 209 for more information about authentication

 

methods.

 

 

Monitored

This table shows the status of the device HA settings and status of the ZyWALL’s

Interface

interfaces.

Summary

 

 

 

Edit

Select an entry and click this to be able to modify it.

 

 

Activate

To turn on an entry, select it and click Activate.

 

 

 

363

ZyWALL 110/310/1100 Series User’s Guide