Chapter 33 Device HA

"You must subscribe to services on the backup ZyWALL before synchronizing it with the master ZyWALL.

33.6.2Synchronize Screen

Use this screen if you want the ZyWALL to get or to send updated IDP signatures, and configuration information in the virtual router.

"You can only set up synchronization with other ZyWALLs of the same model running the same firmware version.

To access this screen, click Network > Device HA > Synchronize.

Figure 368 Network > Device HA > Synchronize

For synchronization, every ZyWALL in a virtual router should usually have the same Password, Synchronize From, and on port values. In addition, the management IP address must be in the same subnet as the interface (in other words, the virtual router). The following table describes the labels in this screen.

Table 154 Network > Device HA > Synchronize

LABEL

DESCRIPTION

Password

Enter the password used to verify other ZyWALL routers during synchronization.

 

This password is different than the one that is used for authentication in the VRRP

 

group. Every ZyWALL in the virtual router must use the same password. If you

 

leave this field blank, the password returns to its default setting “1234”.

 

 

Synchronize

Enter the IP address or fully-qualified domain name (FQDN) of the router from

from

which to get updated configuration and IDP signatures. Usually, you should enter

 

the IP address or FQDN of a virtual router on a secure network.

 

 

on port

Enter the Secure FTP port number used by the ZyWALL you specified in

 

Synchronize from. Usually, every ZyWALL in the virtual router should use the

 

same port number. Otherwise, if the master ZyWALL changes, you might have to

 

change this port number.

 

 

 

501

ZyWALL USG 1000 User’s Guide