Zyxel ZyWALL USG 20 [106/150] Active passive mode device ha example

Chapter 5 Managing Traffic

ZyWALL USG 20-2000 User’s Guide

106

Management Access IP Addresses

For each interface you can configure an IP address in the same subnet as the interface IP address

to use to manage the ZyWALL whether it is the master or the backup.

Synchronization

Synchronize ZyWALLs of the same model and firmware version to copy the master ZyWALL’s

configuration, signatures (anti-virus, IDP/application patrol, and system protect), and certificates to

the backup ZyWALL so you do not need to do it manually.

5.4.1 Active-Passive Mode Device HA Example

Here active-passive mode device HA has backup ZyWALL B automatically takes over all of master

ZyWALL A’s functions if A fails or loses its LAN or WAN connection.

An Ethernet switch connects both ZyWALLs’ LAN interfaces to the LAN. Whichever ZyWALL is

functioning as the master uses the default gateway IP address of the LAN computers (192.168.1.1)

for its LAN interface and the static public IP address (1.1.1.1) for its WAN interface. If ZyWALL A

recovers (has both its LAN and WAN interfaces connected), it resumes its role as the master and

takes over all of its functions again.

Figure 43 Device HA: Master Fails and Backup Takes Over

Each ZyWALL’s LAN interface also has a separate management IP address that stays the same

whether the ZyWALL functions as the master or a backup. ZyWALL A’s management IP address is

192.168.1.3 and ZyWALL B’s is 192.168.1.5.

Figure 44 Device HA: Management IP Addresses

192.168.1.1

LAN

192.168.1.1

1.1.1.1

LAN

192.168.1.3

192.168.1.5