Table of Contents
Advertisement
Supported Platforms
High Availability is supported on the SMA 400, SRA 4600, and the SMA 500v Virtual Appliance.
Configuring High Availability
High Availability (HA) requires one SMA 400, SRA 4600, or SMA 500v Virtual Appliance configured as a primary
device and an identical SMA/SRA configured as a backup device. The HA connection between two SMA/SRA
appliances is in an Active/Passive state. The session information is synchronized between the HA pair to help
avoid re-authentication of users in the event of a failover to the backup device.
See the following sections for configuration information:
•
Physical Connectivity
•
Preparing for High Availability
•
Configuring High Availability Settings on a hardware appliance
•
Enabling Interface Monitoring
•
Configuring Network Monitoring Addresses
•
Configuring Management Settings for Idle Unit
•
Synchronizing Firmware
•
Synchronizing Settings
•
Synchronizing Licenses
Physical Connectivity
You can select the interface to use for HA control traffic. The HA link should connect the identical ports of the
SMA/SRA HA Pair, for example X3 of the primary appliance to X3 of the backup appliance.
During normal operation, the primary device is in an active state and services all connections, while the backup
device is in an idle state. When the primary device loses connectivity, the backup transitions to the active state
and begins to service outside connections.
Preparing for High Availability
Before configuring the options on the High Availability > Settings page, prepare your devices for High
Availability with the following steps:
1
Configure both SMA/SRA appliances as separate devices with independent IP addresses on your subnet.
NOTE:
SMA/SRA appliances in an HA pair cannot be deployed behind a proxy.
2
Upload the latest Secure Mobile Access firmware to both devices. High Availability does not work unless
both devices have the same firmware version installed.
3
Connect the X3 interfaces of the two appliances together with a CAT 5E or better cable to ensure a
gigabit connection.
NOTE:
Dell SonicWALL recommends that you backup and download the settings for both
SMA/SRA appliances at this stage.
4
In a browser, log in to the primary unit and navigate to the Network > Interfaces page. Confirm that the
X3 port is active by checking the Status that should show 1000 Mbps Full Duplex.
on page
330
on page
330
on page
334
on page
on page
336
on page
336
on page
336
on page
335
on page
335
Dell SonicWALL Secure Mobile Access 8.5
331
Administration Guide
330
Advertisement
Chapters
Table of Contents
Troubleshooting
