Initial High Availability Setup - SonicWALL NSA Series Getting Started Manual

NSA_5000_4500_3500_GSG.book Page 28 Wednesday, January 19, 2011 6:21 PM
Configuring a State Sync Pair in
NAT/Route Mode
This section provides instructions for configuring a pair of
SonicWALL NSA appliances for high availability (HA). This
section is relevant to administrators following deployment
scenario B.
This section contains the following subsections:
Initial High Availability Setup
•
Configuring High Availability
•
Configuring Advanced HA Settings
•
Synchronizing Settings
• - page 31
Adjusting High Availability Settings
•
Synchronizing Firmware
•
HA License Configuration Overview
•
Associating Pre-Registered Appliances
•
SonicWALL NSA 2
SonicWALL
HA / Failover Pair
Network Security Appliance
Network Security Appliance
X5 HA Link
SonicWALL NSA 1
Network Security Appliance
Network Security Appliance
NSA
X0 LAN
Local Network
Page 28 Configuring a State Sync Pair in NAT/Route Mode
- page 28
- page 29
- page 29
- page 32
- page 32
- page 33
- page 34
NSA
X0 LAN
X1 WAN
Internet
X1 WAN

Initial High Availability Setup

Before you begin the configuration of HA on the Primary
SonicWALL security appliance, perform the following setup:
1. On the bottom panel of the Backup SonicWALL security
appliance, locate the serial number and write the number
down. You need to enter this number in the High
Availability > Settings page.
2. Verify that the Primary SonicWALL and Backup
SonicWALL security appliances are registered, running the
same SonicOS Enhanced versions, and running the same
SonicWALL Security services.
3. Make sure the Primary SonicWALL and Backup
SonicWALL security appliances' LAN, WAN and other
interfaces are properly configured for failover.
4. Connect the X5 ports on the Primary SonicWALL and
Backup SonicWALL appliances with a CAT6-rated
crossover cable (red crossover cable). The Primary and
Backup SonicWALL security appliances must have a
dedicated connection. SonicWALL recommends cross-
connecting the two together using a CAT6 crossover
Ethernet cable, but a connection using a dedicated hub/
switch is also valid.
5. Power up the Primary SonicWALL security appliance, and
then power up the Backup SonicWALL security appliance.
6. Do not make any configuration changes to the Primary's
HA interface; the High Availability configuration in an
upcoming step takes care of this issue. When done,
disconnect the workstation.