This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to configure HA on UTM SG105

Hello,

I have a couple of questions regarding configuring HA on UTM SG105:

1) Is it necessary that we connect the master and slave with a dedicated Ethernet cable on the HA port? Or can we connect them thorough a switch (in case we need to place the two devices on different floors of the same building)?

2) Do we need to provide a separate WAN connection on the slave node?

3) Our understanding of HA is that in case the master goes down, then the slave takes up the load. However, if the master goes down, how will it transfer the load on to the slave in OFF state?

Thanks!

This thread was automatically locked due to age.

Parents

+1 sachingurung over 6 years ago

Hi Prakhar,

You can refer to the HA configuration guide here for this setup. It has all the required information.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Prakhar Jalan over 6 years ago in reply to sachingurung

Hello Sachin!

Thanks! That was really helpful.

One more question - while setting up the Slave node, do we need to configure anything on it such as the IP addresses, etc.? Or simple we need to plug in the hardware and be done with the default settings as is?

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 6 years ago in reply to Prakhar Jalan

Simply plug the Slave device and it will fetch the configurations detail from the Master.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Prakhar Jalan over 6 years ago in reply to sachingurung

What about the licensing then? Don’t we need to upload a valid license on the slave node?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago in reply to Prakhar Jalan

No, Prakhar, there is nothing to do. Just make sure that the new node is at the same software level as your current device, do a Factory Reset of the new node, power it down, connect all of the cables and power it up. The original node will take care of everything.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Prakhar Jalan over 6 years ago in reply to BAlfson

So essentially we can plug in as many nodes in a cluster but need only one valid full-guard license?
Cancel
Vote Up 0 Vote Down

Cancel
+1 BAlfson over 6 years ago in reply to Prakhar Jalan

No, only one additional node in Hot-Standby. If you want to have a Cluster where all devices are Active, you multiply the cost of licensing by the number of Active nodes. In any case, the SG 105 is not powerful enough to have anything other than Active/Passive (Hot-Standby).

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

+1 BAlfson over 6 years ago in reply to Prakhar Jalan

No, only one additional node in Hot-Standby. If you want to have a Cluster where all devices are Active, you multiply the cost of licensing by the number of Active nodes. In any case, the SG 105 is not powerful enough to have anything other than Active/Passive (Hot-Standby).

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data