Setup for backup (spare) ZyWALL 110

Raymond

We setup and installed a ZyWALL 110 for a customer, so we can access a small network via VPN at this customer. Now the customer want to have a spare ZyWALL 110, so he can switch to this spare one when the primary ZyWALL 110 is not working for some reason. High availability is not possible, so we want to connect the spare one to the primary one to copy the configuration occasionally.

What is the best setup, so we can copy the configuration remotely? Only P1 (VPN access), P4 (to local network 1) and P5 (to local network 2) are in use.

Alfonso

Hi @Raymond

I suggest to review the following document to deploy a high availability setup

http://onesecurity.zyxel.com/img/uploads/Device_HA_Setup.pdf

Regards

Zyxel_Cooldia

Hi @Raymond

Welcome to Zyxel Community. 😀

High availability solution +1 

It can reduce your effort to sync up both device up to date configuration file.

Without HA, you need to back up configuration file periodically, and apply on spare appliance.

Raymond

I know that HA is better, but the customer don't want to use an extra switch.

What is the next best setup for a the spare (backup) ZyWALL 110?

Zyxel_Cooldia

Hi @Raymond

If so, you need to back up configuration file manually on running device, then apply back configuration to spare device.

Raymond

Hi @Zyxel_Cooldia

I understand, but both devices have to be connected permanently and must have the same configuration. I want to copy the configuration remotely.

Because P2 and P3 are not in used, I want to use these ports to connect the primary and the spare ZyWALL with each other, so I can copy the configuration. Is that possible?

zyman2008

Hi @Raymond,

I think you can leverage the configuration auto sync. function of device HA pro.

But just connect the heartbeat port of the spare one(passive device).

So that you don't need extra switch but can get benefit of configuration auto update on the spare one.

Once the primary one down.

You can manually connect all cables on the spare one to goes up.

Zyxel_Cooldia

Hi @zyman2008 ,

That's a brilliant idea. Thanks for sharing the information.😀

Raymond

Thanks for this information. Is it correct that we have to buy a licence to use the HA Pro functionality?

Zyxel_Cooldia

Hi @Raymond

There is no need to purchase license for HA pro. once you register the device you will get the HA pro license for free.

Raymond

Hi @Zyxel_Cooldia

Can I use the PDF in the following link to setup the HA Pro Auto Sync. functionality?

ftp://217.111.207.2/guide/usg/guidenextgen_usg_firmware_4/next_gen_usg_device_ha_pro.pdf