F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices High Availability Configuration Guide-6PW100

Item Descri

tion

Session Failover

Enable/disable the session failover function.

IMPORTANT:

To enable stateful failover for NAT, ALG, and ASPF services, you must enable

session failover.

IPSec Failover

Enable/disable the IPsec failover function.

IMPORTANT:

To enable stateful failover for IPsec services, you must enable IPsec failover.

Asymmetric Path

Select whether to support asymmetric path.

• Select the Asymmetric Path box if sessions enter and leave the internal network

through one device.

• Do not select the Asymmetric Path box if sessions may enter and leave the

internal network through different devices.

IMPORTANT:

This setting must be consistent on both devices. The configuration synchronization

function supports synchronization of this setting.

Main Device for

Configuration

Synchronization

Specify the local device as the active device during configuration synchronization.

If the box is not selected, the local device serves as the standby device during

configuration synchronization.

Auto Synchronization

Select this box to enable auto synchronization when the local device serves as the

active device in configuration synchronization.

IMPORTANT:

You must enable auto synchronization for the active device; otherwise, the device

cannot perform configuration synchronization.

Backup Interface Displays the failover interface.

Modify Backup Interface

Click Modify Backup Interface to enter the Backup Interface Configuration page,

and then you can do the following:

• Select one or more interfaces from the Optional Backup Interface(s) list, and

then click the << button to add the selected interfaces to the Backup Interface(s)

list.

• Select one or more interfaces from the Backup Interface(s) list, and then click

the >> button to remove the selected interfaces from the list.

After completing the settings, click Apply to return to the stateful failover

configuration page.

IMPORTANT:

• The device supports up to two failover interfaces.

• If you click Modify Backup Interface before clicking Apply, the configurations

you have made on the stateful failover configuration page will be lost.