ZyXEL Communications USG 2000 User Manual

 Chapter 39 Device HA

ZyWALL USG 2000 User’s Guide

The following table describes the labels in this screen. See 

 for more information as well.  

Table 179   Configuration > Device HA > Active-Passive Mode

Show Advance 
Settings / Hide 
Advance 
Settings

Click this button to display a greater or lesser number of configuration 
fields.

Device Role

Select the device HA role that the ZyWALL plays in the virtual router. 
Choices are:

Master - This ZyWALL is the master ZyWALL in the virtual router. This 
ZyWALL uses the virtual IP address for each monitored interface.

Note: Do not set this field to Master for two or more ZyWALLs in 

the same virtual router (same cluster ID).

Backup - This ZyWALL is a backup ZyWALL in the virtual router. This 
ZyWALL does not use any of the virtual IP addresses.

Priority

This field is available for a backup ZyWALL. Type the priority of the 
backup ZyWALL. The backup ZyWALL with the highest value takes over 
the role of the master ZyWALL if the master ZyWALL becomes 
unavailable. The priority must be between 1 and 254. (The master 
interface has priority 255.)

Enable 
Preemption

This field is available for a backup ZyWALL. Select this if this ZyWALL 
should become the master ZyWALL if a lower-priority ZyWALL is the 
master when this one is enabled. (If the role is master, the ZyWALL 
preempts by default.)

Cluster Settings
Cluster ID

Type the cluster ID number. A virtual router consists of a master 
ZyWALL and all of its backup ZyWALLs. If you have multiple ZyWALL 
virtual routers on your network, use a different cluster ID for each 
virtual router. 

Authentication

Select the authentication method the virtual router uses. Every 
interface in a virtual router must use the same authentication method 
and password. Choices are:

None - this virtual router does not use any authentication method.

Text - this virtual router uses a plain text password for authentication. 
Type the password in the field next to the radio button. The password 
can consist of alphanumeric characters, the underscore, and some 
punctuation marks (+-/*= :; .! @$&%#~ ‘ \ () ), and it can be up to 
eight characters long.

IP AH (MD5) - this virtual router uses an encrypted MD5 password for 
authentication. Type the password in the field next to the radio button. 
The password can consist of alphanumeric characters, the underscore, 
and some punctuation marks (+-/*= :; .! @$&%#~ ‘ \ () ), and it can 
be up to eight characters long.

See 

 for more information about 

authentication methods.