Chapter 48 Device HA
ZyWALL Series CLI Reference Guide
435
48.4.2 Active-Passive Mode Device HA Command Example
This example configures a Zyxel Device to be a master Zyxel Device for active-passive mode device HA.
There is a management IP address of 192.168.1.3 on lan1. wan1 and lan1 are monitored. The
synchronization password is set to “mySyncPassword”.
48.5 Device HA Pro
You need a license to use Device HA Pro. Device HA Pro is easier to deploy than Device HA, is more
reliable (no risk of overloading), and faster (Device HA causes a connection break of 10~30 seconds
while Device HA Pro just has 1~2 seconds). In addition to configuration file backup in Device HA, device
time, TCP sessions (IPv4/IPv6), IPSec VPN sessions, login/logout information and license status can also be
backed up using Device HA Pro.
Active and Passive Devices
Device HA Pro uses a dedicated heartbeat link between an active device and a passive device for
dynamic syncing and backup to the passive device. On the passive device, all ports are disabled
except for the port with the heartbeat link.
Note: The dedicated heartbeat link port must be the highest-numbered port on each Zyxel
Device for Device HA Pro to work.
Failover from the active Zyxel Device to the passive Zyxel Device is activated when:
• A monitored interface is down
• A monitored service (daemon) is down
• The hearbeat link exceeds the failure tolerance.
After failover, the initial active Zyxel Device becomes the passive Zyxel Device after it recovers.
See Section 48.1.2 on page 431 for differences between Device HA and Device HA Pro.
48.5.1 Deploying Device HA Pro
1 Register either the active or passive Zyxel Device with a Device HA Pro license at MyZyxel.com. Check
that it’s properly licensed in Licensing > Registration > Service in the active Zyxel Device.
2 Make sure the passive Zyxel Device is offline, then enable Device HA in Device HA > General in the
passive Zyxel Device.
Router(config)# device-ha ap-mode lan1 manage-ip 192.168.1.3 255.255.255.0
Router(config)# device-ha ap-mode role master
Router(config)# device-ha ap-mode master sync authentication password
mySyncPassword
Router(config)# device-ha ap-mode wan1 activate
Router(config)# device-ha ap-mode lan1 activate
Router(config)# device-ha activate