F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices High Availability Configuration Guide-6PW100

3BConfiguring stateful failover

The term "router" in this document refers to both routers and routing-capable firewalls and UTM devices.

25B

Feature and hardware compatibility

Hardware Stateful failover

com

atible

F1000-A-EI/F1000-S-EI Yes

F1000-E Yes

F5000 Yes

Firewall module Yes

U200-A Yes

U200-S No

26B

Stateful failover overview

Some customers require the key entries or access points of their networks, such as the Internet access

point of an enterprise or a database server of a bank, to be highly reliable to ensure continuous data

transmission. Deploying only one device (even with high reliability) in such a network risks a single point

of failure, as shown in

496HFigure 27. Stateful failover can solve this problem.

Figure 27 Network with one device deployed

102BOperating procedure

Stateful failover involves service backup and traffic switchover. Stateful failover works as follows:

1. As shown in 497HFigure 28, Device A and Device B connect to each other over a failover link.