How To Use Active-Passive Device Ha - ZyXEL Communications ZyWall USG 2000 User Manual

Chapter 6 Tutorials
The default rule for WAN-to-LAN traffic drops all traffic. You want to allow H.323
2
access through IP address 10.0.0.8, so add a rule before the default rule. Click the
Add icon at the top of the column.
Figure 87 Firewall: WAN to LAN
Configure the screen as follows and click OK. LAN_H323 is the destination
3
because the ZyWALL applies the virtual server to traffic before applying the
firewall rule.
Figure 88 Firewall > Add

6.8 How to Use Active-Passive Device HA

Here is an example of using device HA (High Availability) to backup ZyWALL A
(the master) with ZyWALL B. ZyWALL B automatically takes over all of A's
functions if A fails or loses its ge1 or ge2 connection.
An Ethernet switch connects both ZyWALLs' ge1 interfaces to the LAN. Whichever
ZyWALL is functioning as the master uses the default gateway IP address of the
LAN computers (192.168.1.1) for its ge1 interface and the static public IP address
(1.1.1.1) for its ge2 interface. If ZyWALL A recovers (has both its ge1 and ge2
128
ZyWALL USG 2000 User's Guide