ZyXEL Communications Unified Security Gateway ZyWALL 300, User Manual

Page: 178 / 1156

Chapter 7 Tutorials
ZyWALL USG 300 User’s Guide
178
An Ethernet switch connects both ZyWALLs’
ge1
interfaces to the LAN. Whichever
ZyWALL is functioning as the master uses the default gateway IP address of the
LAN computers (192.168.1.1) for its
ge1
interface and the static public IP address
(1.1.1.1) for its
ge2
interface. If ZyWALL
A
recovers (has both its
ge1
and
ge2
interfaces connected), it resumes its role as the master and takes over all of its
functions again.
Figure 144 Device HA: Master Fails and Backup Takes Over
Each ZyWALL’s ge1 interface also has a separate management IP address that
stays the same whether the ZyWALL functions as the master or a backup. ZyWALL
A ’s management IP address is 192.168.1.3 and ZyWALL B ’s is 192.168.1.5.
Figure 145 Device HA: Management IP Addresses
7.15.1 Before You Start
ZyWALL
A
should already be configured. You will use device HA to copy ZyWALL
A
’s settings to
B
later (in Section 7.15.3 on page 181 ). To avoid an IP address
conflict, do not connect ZyWALL B to the LAN subnet until after you configure its
device HA settings and the instructions tell you to deploy it (in Section 7.15.4 on
page 183 ).
A
192.168.1.1
B
LAN
192.168.1.1
1.1.1.1
1.1.1.1
A
B
LAN
192.168.1.3
192.168.1.5