High Availability (HA) is a clustering technology which is used to maintain uninterrupted services in the event of power, hardware or software failures. Cyberoam appliances can be configured in Active-Active or Active-Passive HA modes. The Appliances - Primary and Auxiliary Appliance, are physically connected over a dedicated HA link port.
In Active-Active mode, both Primary Appliance and Auxiliary Appliance process traffic while the primary unit is in charge of balancing the traffic. Decision of load balancing is taken by the Primary Appliance. Auxiliary Appliance can take over only in case of a primary unit failure.
In Active-Passive mode, only the Primary Appliance processes traffic while Auxiliary Appliance remains in stand-by mode, ready to take over if the Primary Appliance failure occurs.
Note: HA can also be configured when Cyberoam Appliances are deployed in Mixed Mode.
Applies to the following Sophos products and versions Cyberoam Applicable Version: 10.00 onwards
Configure HA in Cyberoam.
You must be logged on to the Web Admin Console as an administrator with Read-Write permission for the relevant feature(s).
Go to System > Administration > Appliance Access, under Admin Services, click to enable SSH for DMZ zone.
Enable SSH on the peer appliance similarly.
console> cyberoam ha passphrase set <enter passphrase>
HA Configuration Mode
Select HA Configuration mode for cluster.
Dedicated HA Link Port
Select the port to be used as dedicated HA link port. HA link port is the port of the Auxiliary Appliance which is to be used for HA.
Peer HA link IP
Specify the IP Address configured on the HA link port of the peer appliance.
Peer Administration Port
Specify the Administration Port for the Auxiliary or Peer Appliance.
Peer Administration IP
Specify the Administration IP Address for the Auxiliary Appliance.
With this IP Address, the Admin Console of Auxiliary Appliance can be accessed. Any user accessing Web Admin Console of the Auxiliary Appliance will be logged in with an HA Profile and have read-only rights.
Select Ports to be monitored
Select the ports to be monitored.
Note: The appliance on which HA is configured becomes the Primary Appliance and the other appliance becomes the Auxiliary Appliance. Once HA is established between the primary and auxiliary appliance, all configuration of the Primary Appliance is synchronized with the Auxiliary Appliance and no additional configuration is required.
console > cyberoam ha show details
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.