Zyxel USG FLEX H Series [HA] - Device High Availability Enhancements (HA PRO)

The article provides detailed information on setting up High Availability (HA) for Zyxel USG FLEX H Series devices. It explains features like the HA Pause, which allows users to temporarily suspend synchronization and failover during troubleshooting without unpairing firewalls. The document also covers the importance of Virtual MAC Address settings for ensuring network stability during failovers. Additionally, it highlights the PWR/SYS LED indicator for identifying HA status and offers guidance on clearing HA logs through CLI commands. The handbook is a comprehensive resource for users to explore initial configurations and advanced security settings.

uOS: Setup Device High Availability (HA PRO)

The HA Pause Allow users to pause synchronisation and disable automatic failover during troubleshooting temporarily. The HA Pause function can only be initiated from the active device. Enabling **Pause Device HA** does not unpair the two firewalls; instead, it temporarily suspends monitored interface checks, heartbeat communication, and file synchronisation.

Full Manual: Zyxel USG FLEX H Series [HA] - Virtual MAC Address Setting (HA PRO)

uOS: Handbook

Handbook for USG FLEX H Series is a valuable resource for users seeking detailed information on High Availability (HA) setup. While HA is a key focus, the handbook also covers a wide range of features, from initial configuration to advanced security settings, making it a comprehensive guide that is often overlooked.

uOS1.32_Handbook

uOS: LED Indicator 

The PWR/SYS LED indicator helps quickly identify the firewall's HA status by showing whether it is currently active or passive.

CLI – Clean Log

The HA logs on both the active and passive firewalls will be cleared. This command can only be used on an active device.

usgflex500h> cmd device-ha ha-log clear
okusgflex500h>

Check the result:

uOS: Virtual MAC Address Setting

Virtual MAC Address on Zyxel Firewall H series devices plays a crucial role in ensuring high availability (HA). In the event of a failover, the passive firewall automatically takes on the same virtual MAC address as the active one, preventing network connection disruptions and minimising downtime. This is especially important for stable operation in critical networks. At the same time, synchronisation of cloud licenses continues to be done using the physical MAC address of the primary device. 

Full Manual: Zyxel USG FLEX H Series [HA] - Virtual MAC Address Setting (HA PRO)

uOS: How to Pause Device HA

The HA Pause Allow users to pause synchronisation and disable automatic failover during troubleshooting temporarily. The HA Pause function can only be initiated from the active device. Enabling **Pause Device HA** does not unpair the two firewalls; instead, it temporarily suspends monitored interface checks, heartbeat communication, and file synchronisation.

Zyxel USG FLEX H Series [HA] - How to Pause Device HA

uOS: Monitor Interface supports LAG interface

Articles in this section

Was this article helpful?
0 out of 0 found this helpful
Share