How to create a high availability cluster with two Barracuda NG firewalls connected to the Kappa Data Control Center.

1. Kappa Data – www.kappadata.eu
HQ - Grote Steenweg 18 - 9840 De Pinte - sales@kappadata.be
Holland Office - Laan van Zuidhoorn 41 - 2289 DC Rijswijk – sales@kappadata.nl
NG FIREWALL: HIGH AVAILABILITY

2. NG Firewall: High Availability pg. 2
Kappa Data – www.kappadata.eu
HQ - Grote Steenweg 18 - 9840 De Pinte - sales@kappadata.be
Holland Office - Laan van Zuidhoorn 41 - 2289 DC Rijswijk – sales@kappadata.nl
DESCRIPTION
How to create a high availability cluster with two NG firewalls connected to the Kappa Data Control Center
RELATED TO
PRODUCT
Barracuda NG Firewall; all versions RELATED TO
VERSION
6.0
AUTHOR Jens Van Heuverswijn @ Kappa Data DATE MODIFIED 24/08/2015
KEYWORDS Barracuda; NG Firewall; High Availability
0. REQUIREMENTS
To operate two Barracuda NG Firewalls in High Availability mode the following is required:
 Each physical firewall needs an external IP-address to communicate with the controlcenter, if this is not provided by the ISP, it is best to
use a router
 The two firewalls need to be of the same type and hardware revision. While it is possible to use a different revision it is only advised to
do so if no other option is available.
1. SETUP
 Create the configuration for the first firewall in the cluster as you would for a standalone firewall:

3. NG Firewall: High Availability pg. 3
Kappa Data – www.kappadata.eu
HQ - Grote Steenweg 18 - 9840 De Pinte - sales@kappadata.be
Holland Office - Laan van Zuidhoorn 41 - 2289 DC Rijswijk – sales@kappadata.nl
 You can then copy this box using the context menu:
 In the copied box; you’ll need to change the following:
o Serial Number:
o Disable Box:

4. NG Firewall: High Availability pg. 4
Kappa Data – www.kappadata.eu
HQ - Grote Steenweg 18 - 9840 De Pinte - sales@kappadata.be
Holland Office - Laan van Zuidhoorn 41 - 2289 DC Rijswijk – sales@kappadata.nl
o IP Address(es):
o Virtual IP Address:
 Once this is done you’ll have two boxes under your cluster:

5. NG Firewall: High Availability pg. 5
Kappa Data – www.kappadata.eu
HQ - Grote Steenweg 18 - 9840 De Pinte - sales@kappadata.be
Holland Office - Laan van Zuidhoorn 41 - 2289 DC Rijswijk – sales@kappadata.nl
 Now we can create the virtual server:
 Unlike the default settings you now need to select the second box you created as secondary box:

6. NG Firewall: High Availability pg. 6
Kappa Data – www.kappadata.eu
HQ - Grote Steenweg 18 - 9840 De Pinte - sales@kappadata.be
Holland Office - Laan van Zuidhoorn 41 - 2289 DC Rijswijk – sales@kappadata.nl
 Click next until you endup on the screen for the moniitoring policy; here we’ll have to setup the monitoring policy for the Virtual Server:
As “IP monitoring Policy” select “one-AND-one-present”; under “Monitored IPs I” add two or more external IP’s that you are sure that will
remain up (p.ex Wan Gateway, ISP dns servers, Google DNS, Kappa Data’s Control Center), under “Monitored IPs II” enter two or more
internal IP’s that will remain up ( p.ex Domain Controller, Internal DNS-server, local switch or router).
 The High availability is now set up. You can now setup the firewall services as you would with a standalone firewall.