Firewall High Availability [HA Pro] - How to replace a defect device in HA Pro

This guide shows how to replace a faulty device in a device ha setup.

Scenario and Topology

In this example Device 2 needs to be replaced.

Before redeploying the HA-Pro environment

1.     Please make sure that all licenses are on the remaining device.

2.     Confirm that the correct serial number of the remaining device was entered on the HA-Pro page.

Configuration > Device HA > Device HA-Pro

3.     Click on "Service License Refresh" on Device 1 to check for any license update from myzyxel.com.

Configuration > Licensing > Registration > Service > Service License Refresh

After receiving the new device (Device 3)

1.     Backup the configuration of Device 1

2.     Device 3 should use the system-default configuration

3.     The running firmware version must be the same on both Devices.

4.     The running partition must be the same on both Devices.

Active (Device 1) - Running Firmware 4.35(ABIQ.2)

Passive (Device 3) - Running Firmware 4.35(ABIQ.2)

Configuration on Device 1

Please go to the following settings and check "Enable Device HA":

Configuration > Device HA > Device HA Pro

Make sure the configuration on each field is correct. (Management IP of the active and passive device, password…)

Next, press the apply button.

Configuration on Device 3

Please go to the following settings and tick "Enable Configuration Provisioning From Active Device" and "Enable Device HA", then press Apply:

Configuration > Device HA > Device HA Pro

Press OK to complete the configuration of the passive device.

Now connect the heartbeat port (the last copper ethernet port) link and wait for the full sync.

In this example, the ATP800 heartbeat port is port 12.

The sync status can also be checked via the console.

commands:

# show device-ha2 device-status
# show device-ha2 passive device-status

# show device-ha2 sync summary

Verification

You can check if everything is working in the log of the device HA status.
You should see the following messages when the configuration was successful:

Device 1 (Active Role)

Device 3 (Passive Role)