Setup for backup (spare) ZyWALL 110

Raymond
Raymond Posts: 19  Freshman Member
First Anniversary 10 Comments Friend Collector
edited April 2021 in Security

We setup and installed a ZyWALL 110 for a customer, so we can access a small network via VPN at this customer. Now the customer want to have a spare ZyWALL 110, so he can switch to this spare one when the primary ZyWALL 110 is not working for some reason. High availability is not possible, so we want to connect the spare one to the primary one to copy the configuration occasionally.

What is the best setup, so we can copy the configuration remotely? Only P1 (VPN access), P4 (to local network 1) and P5 (to local network 2) are in use.

«1

All Replies

  • Alfonso
    Alfonso Posts: 257  Master Member
    First Anniversary Friend Collector First Answer First Comment
    edited August 2019

    Hi @Raymond

    I suggest to review the following document to deploy a high availability setup


    http://onesecurity.zyxel.com/img/uploads/Device_HA_Setup.pdf

    Regards

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,426  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer

    Hi @Raymond

    Welcome to Zyxel Community. 😀

    High availability solution +1 

    It can reduce your effort to sync up both device up to date configuration file.

    Without HA, you need to back up configuration file periodically, and apply on spare appliance.

  • Raymond
    Raymond Posts: 19  Freshman Member
    First Anniversary 10 Comments Friend Collector

    I know that HA is better, but the customer don't want to use an extra switch.

    What is the next best setup for a the spare (backup) ZyWALL 110?

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,426  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer

    Hi @Raymond

    If so, you need to back up configuration file manually on running device, then apply back configuration to spare device.

  • Raymond
    Raymond Posts: 19  Freshman Member
    First Anniversary 10 Comments Friend Collector

    Hi @Zyxel_Cooldia

    I understand, but both devices have to be connected permanently and must have the same configuration. I want to copy the configuration remotely.

    Because P2 and P3 are not in used, I want to use these ports to connect the primary and the spare ZyWALL with each other, so I can copy the configuration. Is that possible?

  • zyman2008
    zyman2008 Posts: 197  Master Member
    First Anniversary 10 Comments Friend Collector First Answer

    Hi @Raymond,

    I think you can leverage the configuration auto sync. function of device HA pro.

    But just connect the heartbeat port of the spare one(passive device).

    So that you don't need extra switch but can get benefit of configuration auto update on the spare one.


    Once the primary one down.

    You can manually connect all cables on the spare one to goes up.

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,426  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer

    Hi @zyman2008 ,

    That's a brilliant idea. Thanks for sharing the information.😀

  • Raymond
    Raymond Posts: 19  Freshman Member
    First Anniversary 10 Comments Friend Collector

    Thanks for this information. Is it correct that we have to buy a licence to use the HA Pro functionality?

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,426  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer

    Hi @Raymond

    There is no need to purchase license for HA pro. once you register the device you will get the HA pro license for free.

  • Raymond
    Raymond Posts: 19  Freshman Member
    First Anniversary 10 Comments Friend Collector

    Hi @Zyxel_Cooldia

    Can I use the PDF in the following link to setup the HA Pro Auto Sync. functionality?

    ftp://217.111.207.2/guide/usg/guidenextgen_usg_firmware_4/next_gen_usg_device_ha_pro.pdf

Security Highlight