Zyxel ZyWALL USG 2000 [110/150] Deploy the backup zywall

Chapter 5 Managing Traffic

ZyWALL USG 20-2000 User’s Guide

110

5.4.5 Deploy the Backup ZyWALL

Connect ZyWALL B’s LAN interface to the LAN network. Connect ZyWALL B’s WAN interface to the

same router that ZyWALL A’s WAN interface uses for Internet access. ZyWALL B copies A’s

configuration (and re-synchronizes with A every hour). If ZyWALL A fails or loses its LAN or WAN

connection, ZyWALL B functions as the master.

5.4.6 Check Your Device HA Setup

1 To make sure ZyWALL B copied ZyWALL A’s settings, you can log into ZyWALL B’s management IP

address (192.168.1.5) and check the configuration. You can use the Maintenance > File

Manager > Configuration File screen to save copies of the ZyWALLs’ configuration files that you

can compare.

2 To test your device HA configuration, disconnect ZyWALL A’s LAN or WAN interface. Computers on

LAN should still be able to access the Internet. If they cannot, check your connections and device

HA configuration.

Congratulations! Now that you have configured device HA for LAN, you can use the same process

for any of the ZyWALL’s other local networks. For example, enable device HA monitoring on the

DMZ interfaces and use an Ethernet switch to connect both ZyWALLs’ DMZ interfaces to your

publicly available servers.

5.5 How to Configure DNS Inbound Load Balancing

This example shows you how to configure the ZyWALL to respond to DNS query messages with the

least loaded interface’s IP address. The DNS query senders will then transmit packets to that

interface instead of an interface that has a heavy load.

This example assumes that your company’s domain name is www.example.com. You want your

ZyWALL’s WAN1 (202.1.2.3) and WAN2 (202.5.6.7) to use DNS inbound load balancing to balance

traffic loading coming from the Internet.

1 In the CONFIGURATION > Network > Inbound LB screen, select Enable DNS Load

Balancing. Click Apply.