Chapter 42 Device HA
ZyWALL USG Series User’s Guide
790
Synchronization
During synchronization, the master Zyxel Device sends the following information to the backup Zyxel
Device.
• Startup configuration file (startup-config.conf)
•AV signatures
• IDP and application patrol signatures
• System protect signatures
• Certificates (My Certificates, and Trusted Certificates)
Synchronization does not change the Device HA settings in the backup Zyxel Device.
Synchronization affects the entire device configuration. You can only configure one set of settings for
synchronization, regardless of how many VRRP groups you might configure. The Zyxel Device uses
Secure FTP (on a port number you can change) to synchronize, but it is still recommended that the
backup Zyxel Device synchronize with a master Zyxel Device on a secure network.
The backup Zyxel Device gets the configuration from the master Zyxel Device. The backup Zyxel Device
cannot become the master or be managed while it applies the new configuration. This usually takes
two or three minutes or longer depending on the configuration complexity.
The following restrictions apply with active-passive mode.
• The master Zyxel Device must have no inactive monitored interfaces.
• The backup Zyxel Device cannot be the master. This refers to the actual role at the time of
synchronization, not the role setting in the configuration screen.
The backup applies the entire configuration if it is different from the backup’s current configuration.
DHCP table, IP/MAC binding table and license status can also be backed up using Device HA Pro.
Br0 {ge4, ge5}
Br0 {ge4, ge5}
To Next Page
Loading...
