Filter
Top Products
Chapter 25 Device HA
ZyWALL (ZLD) CLI Reference Guide
223
Virtual Router and Management IP Addresses
• If a backup takes over for the master, it uses the master’s IP addresses. These IP addresses are
know as the virtual router IP addresses.
• Each interface can also have a management IP address. You can connect to this IP address to
manage the ZyWALL regardless of whether it is the master or the backup.
25.4 Active-Passive Mode Device HA Commands
The following table identifies the values required for many of these commands. Other input values
are discussed with the corresponding commands.
The following sections list the device-ha commands.
25.4.1 Active-Passive Mode Device HA Commands
This table lists the commands for configuring active-passive mode device HA.
Table 125 Input Values for device-ha Commands
LABEL DESCRIPTION
interface_name The name of the interface. This depends on the ZyWALL model.
For the ZyWALL USG 300 and above, use gex, x = 1 ~ N, where N equals the highest
numbered Ethernet interface for your ZyWALL model.
For the ZyWALL USG 200 and below, use a name such as wan1, wan2, opt, lan1, ext-
wlan, or dmz.
Besides, in HA AP mode, the interface can also be a bridge interface.
In HA Legacy mode, the interface can also be a VLAN interface.
Table 126 device-ha ap-mode Commands
COMMAND DESCRIPTION
[no] device-ha ap-mode preempt Turn on preempt if this ZyWALL should become the master ZyWALL if a
lower-priority ZyWALL is the master when this ZyWALL is enabled.
device-ha ap-mode role {master|backup} Sets the ZyWALL to be the master or a backup in the virtual router.
device-ha ap-mode cluster-id <1..32> Sets the cluster ID number. A virtual router consists of a master ZyWALL
and all of its backup ZyWALLs. If you have multiple ZyWALL virtual routers
on your network, use a different cluster ID for each virtual router.
device-ha ap-mode priority <1..254> Sets backup ZyWALL’s priority. The backup ZyWALL with the highest value
takes over the role of the master ZyWALL if the master ZyWALL becomes
unavailable. The priority must be between 1 and 254. (The master interface
has priority 255.)
[no] device-ha ap-mode authentication
{string key | ah-md5 key}
Sets the authentication method the virtual router uses. Every interface in a
virtual router must use the same authentication method and password. The
no command disables authentication.
string: Use a plain text password for authentication. key - Use up to eight
characters including alphanumeric characters, the underscore, and some
punctuation marks (+-/*= :; .! @$&%#~ ‘ \ () ).
ah-md5: Use an encrypted MD5 password for authentication. key - Use up
to eight characters including alphanumeric characters, the underscore, and
some punctuation marks (+-/*= :; .! @$&%#~ ‘ \ () ).