HP VPN Firewall Appliances High Availability Configuration Guide

55
Item Descri
p
tion
Asymmetric Path
Select whether to support asymmetric path.
• Select the Asymmetric Path box if sessions enter and leave the internal network
through one device.
• Do not select the Asymmetric Path box if sessions might enter and leave the
internal network through different devices.
IMPORTANT:
This setting must be consistent on both devices. The configuration synchronization
function supports synchronization of this setting.
Main Device for
Configuration
Synchronization
Specify the local device as the active device during configuration
synchronization.
If the box is not selected, the local device serves as the standby device during
configuration synchronization.
Auto Synchronization
Select this box to enable auto synchronization when the local device serves as the
active device in configuration synchronization.
IMPORTANT:
You must enable auto synchronization for the active device; otherwise, the device
cannot perform configuration synchronization.
Backup Interface Displays the failover interface.
Modify Backup Interface
Click Modify Backup Interface to enter the Backup Interface Configuration page,
and then you can do the following:
• Select one or more interfaces from the Optional Backup Interface(s) list, and
then click the << button to add the selected interfaces to the Backup
Interface(s) list.
• Select one or more interfaces from the Backup Interface(s) list, and then click
the >> button to remove the selected interfaces from the list.
After completing the settings, click Apply to return to the stateful failover
configuration page.
IMPORTANT:
• The device supports up to two failover interfaces.
• If you click Modify Backup Interface before clicking Apply, the configurations
you have made on the stateful failover configuration page will be lost.
Backup VLAN
Specify the backup VLAN.
Backup VLAN is specific to stateful failover. After you specify a backup VLAN,
each device sends stateful failover packets carrying the backup VLAN tag and
judges whether a packet is a stateful over packet based on the backup VLAN tag.
IMPORTANT:
HP recommends not configuring other services for the backup VLAN; otherwise,
the operation of stateful failover might be affected.
Manual Synchronization
Click the Manual Synchronization button to synchronize all configurations from
the active device to the standby device.
If the current stateful failover state is synchronization, you can select the manual
synchronization method.