The Legacy Mode Screen - ZyXEL Communications ZyWall USG 2000 User Manual

Unified security gateway
Hide thumbs Also See for ZyWall USG 2000:
Table of Contents

Advertisement

Chapter 36 Device HA
Table 178 Device HA > Active-Passive Mode > Edit (continued)
LABEL
Virtual Router
IP (VRIP) /
Subnet Mask
Management
IP
Subnet Mask
OK
Cancel

36.5 The Legacy Mode Screen

Virtual Router Redundancy Protocol (VRRP)
Legacy mode device HA uses Virtual Router Redundancy Protocol (VRRP) to create
redundant backup gateways to ensure that a default gateway is always available.
The ZyWALL uses a custom VRRP implementation and is not compatible with
standard VRRP.
While active-passive mode only requires a single cluster ID for the entire virtual
router, legacy mode device HA requires you to configure a separate VRRP group
and Virtual Router ID (VRID) for each interface in a virtual router.
Additional VRRP Notes
• It is possible to set up two virtual routers so that they back up each other.
• VRRP uses IP protocol 112.
VRRP Groups
In legacy mode, you create a VRRP group to add one of its interfaces to a virtual
router. You can add any Ethernet or VLAN interface with a static IP address. You
do not configure VRRP groups for virtual interfaces.
• You can only use interfaces that have static IP addresses.
• You can only enable one VRRP group for each interface, and you can only have
one active VRRP group for each virtual router.
• If you create a VRRP group for an Ethernet interface that has a VLAN interface
configured on it, make sure you create a separate VRRP group for the VLAN
interface. This will avoid an IP conflict if the backup ZyWALL takes over for the
master.
604
DESCRIPTION
This is the interface's (static) IP address and subnet mask in the virtual
router. Whichever ZyWALL is currently serving as the master uses this
virtual router IP address and subnet mask. These fields are blank if the
interface is a DHCP client or has no IP settings.
Enter the interface's IP address for management access. You can use
this IP address to access the ZyWALL whether it is the master or a
backup. This management IP address should be in the same subnet as
the interface IP address.
Enter the subnet mask of the interface's management IP address.
Click OK to save your changes back to the ZyWALL.
Click Cancel to exit this screen without saving your changes.
ZyWALL USG 2000 User's Guide

Advertisement

Table of Contents
loading

This manual is also suitable for:

Zywall usg 1000

Table of Contents