Download to read offline
Uploaded bysharetech
UTM high availability(ha)
This document discusses how to configure high availability (HA) between two firewall devices to ensure continuous network access and security. The master and backup firewalls are configured with the same local IP addresses and synchronize all configuration settings and log data. If the master fails or loses connectivity, network traffic will automatically fail over to the backup device without interruption of service.
More Related Content
UTM high availability(ha)
- 1. ShareTech UTM High Availability(HA) Masterand Slave systems connected are configured for high availability and keep the data synchronized. L/O/G/O www.sharetech.com.tw / www.higuard.com
- 2.
- 3. Original Network Architecture Noted:HA must be two same model names.
- 4. Master LAN IP:192.168.1.102 Enable it MasterMode Manage IP → the same setting as Backup → free IP with the same subnet between Master and Backup Remote IP → Backup LAN IP → 192.168.1.100
- 5. Master Configuration > Notification> Master/Slave Switch
- 6.
- 7. Backup LAN IP:192.168.1.100 Enable it BackupMode Manage IP → the same setting as Master → free IP with the same subnet between master and backup Remote IP → Master LAN IP → 192.168.1.102
- 8. LAN Internal Users GatewayIP:192.168.1.101 DMZ Internal Servers Gateway IP:192.168.1.104
- 9.
- 10. HA Synchronizing WAN：61.10.10.10 DMZ：192.168.1.104 Master ConfigureSetting Flow Analysis Web Content FTP Content MSN Content Mail Content Log Backup Configure Setting Policy settings DNS settings WAN settings DMZ settings VPN settings CMS settings Mail Security settings Advanced Protection IDP & Botnet ……so on.
- 11. HA Process - ifMaster power down or LAN fail Noted: HA wouldn’t switch if HDD fail
- 12. HA – Backupworks - while fixing Master
- 13. HA – Masterback - after finished fixing Master, Backup becomes Master WAN：61.10.10.10 Backup DMZ：192.168.1.104 Backup →Master
- 14. HA Synchronizing WAN：61.10.10.10 DMZ：192.168.1.104 Master Backup ˙Configure Setting Policysettings DNS settings DMZ settings VPN settings CMS settings Mail Security settings Advanced Protection IDP & Botnet ……so on. Configure Setting Flow Analysis Web Content FTP Content MSN Content Mail Content Log
- 15. HA Operation LAN IP：192.168.1.102 Mode：Master→Backup ManageIP：192.168.1.101 Remote IP：192.168.1.100 LAN IP：192.168.1.100 Mode：Backup→Master Manage IP：192.168.1.101 Remote IP：192.168.1.102
- 16. Thank You! Please don'thesitate to mail us if you have further questions. help@sharetech.com.tw L/O/G/O www.sharetech.com.tw / www.higuard.com