SonicWALL 5.8.1 Manuale Utente

the newly-Active appliance keeps the dynamic routes it had previously learned in its route table. 
During this time, the newly-Active appliance relearns the dynamic routes in the network. When 
the Dynamic Route Hold-Down Time duration expires, it deletes the old routes and 
implements the new routes it has learned from RIP or OSPF. The default value is 45 seconds. 
In large or complex networks, a larger value may improve network stability during a failover. 

The Dynamic Route Hold-Down Time setting is displayed only when the Advanced 
Routing option is selected on the Network > Routing page.

Select the Include Certificates/Keys checkbox to have the appliances synchronize all 
certificates and keys.

You do not need to click Synchronize Settings at this time, because all settings will be 
automatically synchronized to the Idle unit when you click Accept after completing HA 
configuration. To synchronize all settings on the Active unit to the Idle unit immediately, click 
Synchronize Settings. The Idle unit will reboot.

Click Synchronize Firmware if you previously uploaded new firmware to your Primary unit 
while the Backup unit was offline, and it is now online and ready to upgrade to the new firmware. 
Synchronize Firmware is typically used after taking your Backup appliance offline while you 
test a new firmware version on the Primary unit before upgrading both units to it.

When finished with all High Availability configuration, click Accept. All settings will be 
synchronized to the Idle unit automatically.

If you enabled Active/Active UTM, the Network > Interfaces page will show that the selected 
interface for HA Data Interface now belongs to the HA Data-Link zone.

On the High Availability > Monitoring page, you can configure both physical and logical 
interface monitoring. By enabling physical interface monitoring, you enable link detection for 
the designated HA interfaces. The link is sensed at the physical layer to determine link viability. 
Logical monitoring involves configuring the SonicWALL to monitor a reliable device on one or 
more of the connected networks. Failure to periodically communicate with the device by the 
Active unit in the HA Pair will trigger a failover to the Idle unit. If neither unit in the HA Pair can 
connect to the device, no action will be taken.

The Primary and Backup IP addresses configured on this page are used for multiple purposes: 

As independent management addresses for each unit (supported on all physical interfaces)

To allow synchronization of licenses between the Idle unit and the SonicWALL licensing 
server 

As the source IP addresses for the probe pings sent out during logical monitoring 

Configuring unique management IP addresses for both units in the HA Pair allows you to log in 
to each unit independently for management purposes. Note that non-management traffic is 
ignored if it is sent to one of these IP addresses. The Primary and Backup SonicWALL security 
appliances’ unique LAN IP addresses cannot act as an active gateway; all systems connected 
to the internal LAN will need to use the virtual LAN IP address as their gateway. 

The management IP address of the Backup/Idle unit is used to allow license synchronization 
with the SonicWALL licensing server, which handles licensing on a per-appliance basis (not 
per-HA Pair). Even if the Backup unit was already registered on MySonicWALL before creating 
the HA association, you must use the link on the System > Licenses page to connect to the 
SonicWALL server while accessing the Backup appliance through its management IP address.