Chapter 5 Managing Traffic
ZyWALL USG 20-2000 User’s Guide
106
Management Access IP Addresses
For each interface you can configure an IP address in the same subnet as the interface IP address
to use to manage the ZyWALL whether it is the master or the backup.
Synchronization
Synchronize ZyWALLs of the same model and firmware version to copy the master ZyWALL’s
configuration, signatures (anti-virus, IDP/application patrol, and system protect), and certificates to
the backup ZyWALL so you do not need to do it manually.
5.4.1 Active-Passive Mode Device HA Example
Here active-passive mode device HA has backup ZyWALL
B
automatically takes over all of master
ZyWALL
A
’s functions if
A
fails or loses its LAN or WAN connection.
An Ethernet switch connects both ZyWALLs’ LAN interfaces to the LAN. Whichever ZyWALL is
functioning as the master uses the default gateway IP address of the LAN computers (192.168.1.1)
for its LAN interface and the static public IP address (1.1.1.1) for its WAN interface. If ZyWALL
A
recovers (has both its LAN and WAN interfaces connected), it resumes its role as the master and
takes over all of its functions again.
Figure 43
Device HA: Master Fails and Backup Takes Over
Each ZyWALL’s LAN interface also has a separate management IP address that stays the same
whether the ZyWALL functions as the master or a backup. ZyWALL
A
’s management IP address is
192.168.1.3 and ZyWALL
B
’s is 192.168.1.5.
Figure 44
Device HA: Management IP Addresses
A
192.168.1.1
B
LAN
192.168.1.1
1.1.1.1
1.1.1.1
A
B
LAN
192.168.1.3
192.168.1.5
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
