Setup for backup (spare) ZyWALL 110

Raymond
Raymond Posts: 19  Freshman Member
First Comment Friend Collector Fifth Anniversary
edited April 2021 in Security

We setup and installed a ZyWALL 110 for a customer, so we can access a small network via VPN at this customer. Now the customer want to have a spare ZyWALL 110, so he can switch to this spare one when the primary ZyWALL 110 is not working for some reason. High availability is not possible, so we want to connect the spare one to the primary one to copy the configuration occasionally.

What is the best setup, so we can copy the configuration remotely? Only P1 (VPN access), P4 (to local network 1) and P5 (to local network 2) are in use.

«1

All Replies

  • Alfonso
    Alfonso Posts: 257  Master Member
    5 Answers First Comment Friend Collector Second Anniversary
    edited August 2019

    Hi @Raymond

    I suggest to review the following document to deploy a high availability setup


    http://onesecurity.zyxel.com/img/uploads/Device_HA_Setup.pdf

    Regards

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,511  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @Raymond

    Welcome to Zyxel Community. 😀

    High availability solution +1 

    It can reduce your effort to sync up both device up to date configuration file.

    Without HA, you need to back up configuration file periodically, and apply on spare appliance.

  • Raymond
    Raymond Posts: 19  Freshman Member
    First Comment Friend Collector Fifth Anniversary

    I know that HA is better, but the customer don't want to use an extra switch.

    What is the next best setup for a the spare (backup) ZyWALL 110?

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,511  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @Raymond

    If so, you need to back up configuration file manually on running device, then apply back configuration to spare device.

  • Raymond
    Raymond Posts: 19  Freshman Member
    First Comment Friend Collector Fifth Anniversary

    Hi @Zyxel_Cooldia

    I understand, but both devices have to be connected permanently and must have the same configuration. I want to copy the configuration remotely.

    Because P2 and P3 are not in used, I want to use these ports to connect the primary and the spare ZyWALL with each other, so I can copy the configuration. Is that possible?

  • zyman2008
    zyman2008 Posts: 223  Master Member
    25 Answers First Comment Friend Collector Seventh Anniversary

    Hi @Raymond,

    I think you can leverage the configuration auto sync. function of device HA pro.

    But just connect the heartbeat port of the spare one(passive device).

    So that you don't need extra switch but can get benefit of configuration auto update on the spare one.


    Once the primary one down.

    You can manually connect all cables on the spare one to goes up.

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,511  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @zyman2008 ,

    That's a brilliant idea. Thanks for sharing the information.😀

  • Raymond
    Raymond Posts: 19  Freshman Member
    First Comment Friend Collector Fifth Anniversary

    Thanks for this information. Is it correct that we have to buy a licence to use the HA Pro functionality?

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,511  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @Raymond

    There is no need to purchase license for HA pro. once you register the device you will get the HA pro license for free.

  • Raymond
    Raymond Posts: 19  Freshman Member
    First Comment Friend Collector Fifth Anniversary

    Hi @Zyxel_Cooldia

    Can I use the PDF in the following link to setup the HA Pro Auto Sync. functionality?

    ftp://217.111.207.2/guide/usg/guidenextgen_usg_firmware_4/next_gen_usg_device_ha_pro.pdf

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）