USG-FLEX 700 HA Issue

Hashaam
Hashaam Posts: 3
First Comment Friend Collector
in Security

We are trying to configure the Device HA pro in USG Flex 700 and getting below error whenever trying to enable the Device HA.

"CLi Number: 0

Error Number: -45050

Management interface cannot join to Vlan interface"

Best Answers

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,411  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓
    Make sure that the last Ethernet interface (P12/ge12) is not used by any other configurations. For example, Policy Routes, NAT rules, VLAN interface base port, Zones, etc. This interface is used for Heartbeat port for keeping the devices linked together.
  • Zyxel_Emily
    Zyxel_Emily Posts: 1,411  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓
    You can select any device as the active device. 
    For example, device A is the active device and device B is the passive device. Remember to transfer all licenses from device B to device A before HA setup.
    On device A, follow the configuration guide on page 613 in the handbook to enter serial number of device A. 
    On device B, follow the configuration guide on page 614 in the handbook. 

    You can find detailed steps in the handbook.

All Replies

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,411  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓
    Make sure that the last Ethernet interface (P12/ge12) is not used by any other configurations. For example, Policy Routes, NAT rules, VLAN interface base port, Zones, etc. This interface is used for Heartbeat port for keeping the devices linked together.
  • Hashaam
    Hashaam Posts: 3
    First Comment Friend Collector
    @ Zyxel_Emily thanks for the information. One more thing, when we connect the two USG FLEX 700 firewalls how they will make a selection for active and passive HA as there is no device role feature in the firewall.
  • Zyxel_Emily
    Zyxel_Emily Posts: 1,411  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓
    You can select any device as the active device. 
    For example, device A is the active device and device B is the passive device. Remember to transfer all licenses from device B to device A before HA setup.
    On device A, follow the configuration guide on page 613 in the handbook to enter serial number of device A. 
    On device B, follow the configuration guide on page 614 in the handbook. 

    You can find detailed steps in the handbook.
  • Hashaam
    Hashaam Posts: 3
    First Comment Friend Collector
    Zyxel_Emily thanks

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）