ZyXEL Communications ZyWALL 110 User Manual page 563

Table 231 Configuration > Device HA > Active-Passive Mode (continued)
LABEL DESCRIPTION
Priority This field is available for a backup ZyWALL/USG. Type the priority of the backup ZyWALL/
USG. The backup ZyWALL/USG with the highest value takes over the role of the master
ZyWALL/USG if the master ZyWALL/USG becomes unavailable. The priority must be
between 1 and 254. (The master interface has priority 255.)
Enable This field is available for a backup ZyWALL/USG. Select this if this ZyWALL/USG should
Preemption become the master ZyWALL/USG if a lower-priority ZyWALL/USG is the master when this
one is enabled. (If the role is master, the ZyWALL/USG preempts by default.)
Cluster Settings
Cluster ID Type the cluster ID number. A virtual router consists of a master ZyWALL/USG and all of
its backup ZyWALL/USGs. If you have multiple ZyWALL/USG virtual routers on your
network, use a different cluster ID for each virtual router.
Authentication Select the authentication method the virtual router uses. Every interface in a virtual
router must use the same authentication method and password. Choices are:
None - this virtual router does not use any authentication method.
Text - this virtual router uses a plain text password for authentication. Type the
password in the field next to the radio button. The password can consist of alphanumeric
characters, the underscore, and some punctuation marks (+-/*= :; .! @$&%#~ ' \ () ),
and it can be up to eight characters long.
IP AH (MD5) - this virtual router uses an encrypted MD5 password for authentication.
Type the password in the field next to the radio button. The password can consist of
alphanumeric characters, the underscore, and some punctuation marks (+-/*= :; .!
@$&%#~ ' \ () ), and it can be up to eight characters long.
Monitored This table shows the status of the device HA settings and status of the ZyWALL/USG's
Interface interfaces.
Summary
Edit Select an entry and click this to be able to modify it.
Activate To turn on an entry, select it and click Activate.
Inactivate To turn off an entry, select it and click Inactivate.
# This is the entry's index number in the list.
Status The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is
inactive.
Interface This field identifies the interface. At the time of writing, Ethernet and bridge interfaces
can be included in the active-passive mode virtual router. The member interfaces of any
bridge interfaces do not display separately.
Virtual Router IP / This is the master ZyWALL/USG's (static) IP address and subnet mask for this interface.
Netmask If a backup takes over for the master, it uses this IP address. These fields are blank if the
interface is a DHCP client or has no IP settings.
Management IP / This field displays the interface's management IP address and subnet mask. You can use
Netmask this IP address and subnet mask to access the ZyWALL/USG whether it is in master or
backup mode.
Link Status This tells whether the monitored interface's connection is down or up.
Synchronization Use synchronization to have a backup ZyWALL/USG copy the master ZyWALL/USG's
configuration, certificates, AV signatures, IDP and application patrol signatures, and
system protect signatures.
Every interface's management IP address must be in the same subnet as the interface's
IP address (the virtual router IP address).
Chapter 34 Device HA
ZyWALL/USG Series User's Guide
563