ZyXEL Communications ZyWall USG 2000 User Manual page 908

Chapter 57 Troubleshooting
• You may need to disable STP (Spanning Tree Protocol).
• The master and its backups must all use the same device HA mode (either
active-passive or legacy).
• Configure a static IP address for each interface that you will have device HA
monitor.
• Configure a separate management IP address for each interface. You can use it
to access the ZyWALL for management whether the ZyWALL is the master or a
backup. The management IP address should be in the same subnet as the
interface IP address.
• Enable monitoring for the same interfaces on the master and backup ZyWALLs.
• Each monitored interface must have a static IP address and be connected to the
same subnet as the corresponding interface on the backup or master ZyWALL.
• If you have multiple ZyWALL virtual routers on your network, use a different
cluster ID to identify each virtual router. There can only be one master ZyWALL
in each virtual router (same cluster ID).
A broadcast storm results when I turn on Device HA.
Do not connect the bridge interfaces on two ZyWALLs without device HA activated
on both. Either activate device HA before connecting the bridge interfaces or
disable the bridge interfaces, connect the bridge interfaces, activate device HA,
and finally reactivate the bridge interfaces.
I cannot get the RADIUS server to authenticate the ZyWALL's default admin
account.
The default admin account is always authenticated locally, regardless of the
authentication method setting. (See
about authentication methods.)
The ZyWALL fails to authentication the ext-user user accounts I configured.
An external server such as AD, LDAP or RADIUS must authenticate the ext-user
accounts. If the ZyWALL tries to use the local database to authenticate an ext-
user, the authentication attempt will always fail. (This is related to AAA servers
and authentication methods, which are discussed in
Chapter 45 on page
908
Chapter 44 on page 731
741, respectively.)
for more information
Chapter 44 on page 731
ZyWALL USG 2000 User's Guide
and