ZyXEL Communications ZyWall USG 2000 User Manual page 602

Chapter 36 Device HA
Table 177 Device HA > Active-Passive Mode (continued)
LABEL
Virtual Router
IP / Netmask
Management
IP / Netmask
Link Status
Modify
Synchronizatio
n
Server Address If this ZyWALL is set to backup role, enter the IP address or Fully-
Sync. Now
Server Port
Password
602
DESCRIPTION
This is the master ZyWALL's (static) IP address and subnet mask for this
interface. If a backup takes over for the master, it uses this IP address.
These fields are blank if the interface is a DHCP client or has no IP
settings.
This field displays the interface's management IP address and subnet
mask. You can use this IP address and subnet mask to access the
ZyWALL whether it is in master or backup mode.
This tells whether the monitored interface's connection is down or up.
This column provides icons to activate, deactivate, or edit monitored
interfaces.
To activate or deactivate device HA monitoring of an interface, click the
interface's Active icon. Make sure you click Apply to save and apply the
change.
To edit an interface's management IP address and subnet mask, click its
Edit icon. The Add/Edit screen appears.
Use synchronization to have a backup ZyWALL copy the master
ZyWALL's configuration, certificates, AV signatures, IDP and application
patrol signatures, and system protect signatures.
Every interface's management IP address must be in the same subnet as
the interface's IP address (the virtual router IP address).
Qualified Domain Name (FQDN) of the ZyWALL from which to get
updated configuration. Usually, you should enter the IP address or FQDN
of a virtual router on a secure network.
If this ZyWALL is set to master role, this field displays the ZyWALL's IP
addresses and/or Fully-Qualified Domain Names (FQDN) through which
ZyWALLs in backup role can get updated configuration from this
ZyWALL.
Click this to copy the specified ZyWALL's configuration.
If this ZyWALL is set to backup role, enter the port number to use for
Secure FTP when synchronizing with the specified master ZyWALL.
If this ZyWALL is set to master role, this field displays the ZyWALL's
Secure FTP port number. Click the link if you need to change the FTP
port number.
Every ZyWALL in the virtual router must use the same port number. If
the master ZyWALL changes, you have to manually change this port
number in the backups.
Enter the password used for verification during synchronization. Every
ZyWALL in the virtual router must use the same password.
If you leave this field blank in the master ZyWALL, no backup ZyWALLs
can synchronize from it.
If you leave this field blank in a backup ZyWALL, it cannot synchronize
from the master ZyWALL.
ZyWALL USG 2000 User's Guide