R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

54
Table 7 Configuration items
Item Descri
p
tion
Enable Stateful Failover
Enable/disable the stateful failover feature.
IMPORTANT:
The configuration items are available only after you select the Enable Stateful
Failover box.
Session Failover
Enable/disable the session failover function.
IMPORTANT:
To enable stateful failover for NAT, ALG, and ASPF services, you must enable
session failover.
IPSec Failover
Enable/disable the IPsec failover function.
IMPORTANT:
• To enable stateful failover for IPsec services, you must enable IPsec failover.
• The firewall does not support the IPsec failover function.
Asymmetric Path
Select whether to support asymmetric path:
• Select the Asymmetric Path box if sessions enter and leave the internal network
through one device.
• Do not select the Asymmetric Path box if sessions may enter and leave the
internal network through different devices.
IMPORTANT:
This setting must be the same on the two devices. The configuration synchronization
function supports synchronization of this setting.
Main Device for
Configuration
Synchronization
Specify the local device as the active device during configuration synchronization.
If the box is not selected, the local device serves as the standby device during
configuration synchronization.
Auto Synchronization
Select this box to enable auto synchronization when the local device serves as the
active device in configuration synchronization.
IMPORTANT:
You must enable auto synchronization for the active device; otherwise, the device
cannot perform configuration synchronization.
Backup Interface
Display the failover interface.
IMPORTANT:
• You cannot configure other functions or parameters on the failover interface.
• The device support only directly connecting to the backup interface to back up
the status and configuration.