Device HA: Enhanced Debug Logging Support

Zyxel_Claudia

With the latest firmware, Device HA on Zyxel firewalls receives a significant enhancement around debug log collection - making troubleshooting HA pairs far more effective and easier to manage.

What’s New

1. Persistent Debug Logs

When you enable debug logging for DeviceHA, the firewall now writes logs to its flash storage, meaning they are retained after a reboot. Previously, logs would disappear with a reboot.

2. Centralized Collection from Active Node

If you have a paired HA setup (Active + Passive), you only need to run the enable‑logging command on the active node. The active node will coordinate with the passive node to start logging and also collect logs from the passive, so you can download everything from the active node - no need to log into the passive separately.

How to Use it – Step by Step

Here’s how to enable and collect DeviceHA debug logs:

1. Connect via console or SSH to the active firewall in the HA pair.
2. Enable the debug log saving to flash (on the active node).e.g., via CLI: usgflex200h> cmd device-ha _flash-log enabled true
   
3. The active node sends the command to the passive node to start logging too.
4. When ready to collect logs:
   • On the active node issue the “collect” or “download debug log” command. usgflex200h> cmd device-ha debug-log collect
     
   • This will trigger a compressed logfile to be generated, including logs from both devices.
5. Download the compressed log file via GUI: Maintenance > Diagnostic > System Log (you’ll see “HA debug log – primary” & “HA debug log – secondary”).
   

After troubleshooting, disable debug logging so flash storage isn’t used up: e.g.,

usgflex200h> cmd device-ha _flash-log enabled false

Note

Logging will consume flash storage and potentially fill it if left on for long periods—so remember to turn it off when done.