Zyxel ZyWALL USG 50 [178/185] Zywall usg support notes

ZyWALL USG Support Notes

178

Q06. Is IPSec VPN HA fall back function in ZLD v2.20?

Yes, IPSec VPN HA Fall Back is a newly added function in ZLD v2.20. In IPSec

VPN HA scenario, you can enable “Fall back to Primary Peer Gateway when

possible”, and set a fallback check interval in the range of 60s~86400s.

When IPSec VPN fails over to the secondary gateway address, the Fallback checking

mechanism is triggered. It will check whether the primary gateway is available once

every check interval. If the USG detects that the primary gateway is available again, it

will fall back to the primary gateway.

Q07. I want to add a bridge interface to Device HA. What are

the correct setup steps to prevent broadcast storm?

You can choose either of the following two suggested setup steps:

Setup strategy 1:

1. Make sure the bridge interfaces of the master USG and the backup USG are not

connected.

2. Configure the bridge interface on the master USG, set the bridge interface as a

monitored interface, and activate device HA.

3. Configure the bridge interface on the backup USG, set the bridge interface as a

monitored interface, and activate device HA.

4. Connect the USG‟s.