Before You Begin - ZyXEL Communications ZyWALL USG 200 Series User Manual

Chapter 39 Device HA
• Legacy mode allows for more complex relationships between the master and
backup ZyWALLs, such as active-active or using different ZyWALLs as the
master ZyWALL for individual interfaces. Legacy mode configuration involves a
greater degree of complexity. Active-passive mode is recommended for general
failover deployments.
• The ZyWALLs must all support and be set to use the same device HA mode
(either active-passive or legacy).
Management Access
You can configure a separate management IP address for each interface. You can
use it to access the ZyWALL for management whether the ZyWALL is the master
or a backup. The management IP address should be in the same subnet as the
interface IP address.
Synchronization
Use synchronization to have a backup ZyWALL copy the master ZyWALL's
configuration, signatures (anti-virus, IDP/application patrol, and system protect),
and certificates.
Note: Only ZyWALLs of the same model and firmware version can synchronize.
Otherwise you must manually configure the master ZyWALL's settings on the
backup (by editing copies of the configuration files in a text editor for example).
Finding Out More
• See Section 6.5.24 on page 110
• See Section 39.7 on page 714
• See Section 7.15 on page 177

39.1.3 Before You Begin

• Configure a static IP address for each interface that you will have device HA
monitor.
Note: Subscribe to services on the backup ZyWALL before synchronizing it with the
master ZyWALL.
• Synchronization includes updates for services to which the master and backup
ZyWALLs are both subscribed. For example, a backup subscribed to IDP/
AppPatrol, but not anti-virus, gets IDP/AppPatrol updates from the master, but
not anti-virus updates. It is highly recommended to subscribe the master and
backup ZyWALLs to the same services.
700
for related information on these screens.
for device HA background/technical information.
for an example of using device HA.
ZyWALL USG 100/200 Series User's Guide