You are here: Cookbook > High Availability > Ensuring Uninterrupted Connection Using HA

Ensuring Uninterrupted Connection Using HA

This example introduces how to configure two devices working under Active-Passive mode to provide high availability for the protected network.

The topology gives a typical user scenario for HA. In the designed scenario, one (Device A)of the HA devices will be working under the active mode, while the other (Device B) is under passive mode. The active device will synchronize its data and status to the passive device. When the active one fails, the passive device will immediately switch to be active, without interrupting the network.

Step 1: Configuring track object of Device A. This monitors Device A's eth0. When A's interface fails to work, Device B takes over.

Select Object > Track Object, and click New.

  • Name: track1
  • Threshold: 255
  • Track Type: Select Interface, and click Add. In the prompt, select ethernet0/0, and weight as 255.

Step 2: Configuring HA  

Device A

Select System > HA, under the Group0 part:

  • Priority: 10
  • Track Object: track1

Device B

Select System > HA, under the Group0 part:

  • Priority: 100
Step 3: Configuring Device A's interface and policy  

Select Network > Interface, and double click ethernet0/0.

  • Binding Zone: Layer 3 Zone

  • Zone: untrust

  • Type: Static IP

  • IP Address: 100.1.1.4

  • Netmask: 29

Select Network > Interface, and double click ethernet0/1.

  • Binding Zone: Layer 3 Zone

  • Zone: trust

  • Type: Static IP

  • IP Address: 192.168.1.4

  • Netmask: 29

Select Policy > Security Policy, and click New.

  • Name: policy
  • Source Information
    • Zone: trust
    • Address: Any
  • Destination Information
    • Zone: untrust
    • Address: Any
  • Other Information
    • Service/Server Group: Any
  • Action: Permit
Step 4: Configuring HA control link interface and enabling HA  

Device A

Select System > HA.

  • Control Link Interface 1:ethernet0/4
  • Control Link Interface 2:ethernet0/8
  • IP Address: 1.1.1.1/24
  • HA Cluster ID: 1

Device B

Select System > HA.

  • Control Link Interface 1:ethernet0/4
  • Control Link Interface 2:ethernet0/8
  • IP Address: 1.1.1.2/24
  • HA Cluster ID: 1
Step 5: Configuring management IP of active and passive devices after synchronization

Device A

Select Network > Interface, and double click ethernet0/1. Under the Basic tab, under IP Configuration, click Advanced.

  • Management IP

    • IP Address: 192.168.1.253

Device B

Select Network > Interface, and double click ethernet0/1. In the Basic tab, under IP Configuration, click Advanced.

  • Management IP

    • IP Address: 192.168.1.254
Step 6: Results  

After configuration, select System > System Information. Behind the "HA state" item, the device's HA status will show.

Device A

  • HA Status: Master

Device B

  • HA Status: Backup

Device A:

Device B:

When Device A fails to forward traffic or its eth0/0 is disconnected, Device B will turn to Active and starts forwarding without interrupting protected network.

Select System > System Information. The HA state item shows device's status.

Device A

  • HA Status: Monitor Failed

Device B

  • HA Status: Master

Device A:

Device B: