User Interface
R&S
®
GP-E/GP-S
63User Manual v16.2.1 ─ 01
●
In a High Availability configuration, system updates must be installed in two phases
(see also Chapter 3.4.1.3, "Updates", on page 33). First, by clicking "Download" ,
"Install" and "Reboot" on the master system, the standby (slave) system is updated
and rebooted. If the update was successful, the former slave takes over the master
role, since the software version is newer than the software version on the other
system. Then, the former master is updated and rebooted by clicking "Download" ,
"Install" and "Reboot" on the new master system. After restarting, the new slave
(former master) retains the role of standby system. Do not make changes to the
system at any point in this process.
Important: Always update both systems (master and slave). Otherwise, High
Availability does not work correctly.
●
As long as the slave has an older version running (in the second update phase), no
synchronization is performed as the old system may not understand newer configu-
ration files. It is not advisable to keep this state for too long.
●
Switching off High Availability on a working pair will only switch off the feature on
the master. In this case, the slave would take over and the old master would run
normally without High Availability. Both machines would deliver the same services
on the network which would have unintended effects. So, it is advisable not to
switch off High Availability in such a configuration. It is better to switch off one
machine beforehand and perform a factory reset there. The other machine can still
work with High Availability switched on and later High Availability can be switched
off there.
●
To remove the slave system from the High Availability configuration and operate it
as a standalone system, unplug the cable to the LAN zone and reset the system to
the factory default configuration.
3.4.2.6 Support Access
Enable support access to grant the Rohde & Schwarz Cybersecurity support team
remote access to your gateprotect Firewall via the command-line interface (CLI) in
case of problems.
Navigate to "Network > Support Access" to activate remote access to your gateprotect
Firewall.
The "Support Access" settings allow you to configure the following elements:
Field Description
"On" / "Off" A slider switch indicates whether the support access
is currently enabled ( "On" ) or disabled ( "Off" ). By
clicking on the slider switch you can toggle the state
of this service. The support access is disabled by
default.
"Public IP address" Displays the public IP address of your gateprotect
Firewall.
Menu Reference