This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG, configure cluster HA.

Gentlemen, I'm taking a beating from Cluster HA at XG, two days ago.

I have two Sophos XG VMS, on Virtualbox, I also tried on Vmware. I configured the HA as it has in the manuals of Sophos itself.
Every time I configure the Active / Active HA, the auxiliary XG restarts, its Port1 (LAN) interface remains with the same IP as the primary XG and from there I no longer access either.

Does anyone know where I'm going wrong?

Thanks !

This thread was automatically locked due to age.

Parents

+1 Vishal_R over 4 years ago

Hi IvanildoGalvão

Can you please try by enable MAC address spoofing on each adapter under VM? This is so that they can spoof the virtual MAC addresses of the virtual IP’s that are shared by the HA pair.

Reference snapshot:

After that try to access Primary and Auxiliary device on it's original LAN IP from the machine which is part of the LAN segment or LAN Interface of XG HA Pair.

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

+1 Vishal_R over 4 years ago

Hi IvanildoGalvão

Can you please try by enable MAC address spoofing on each adapter under VM? This is so that they can spoof the virtual MAC addresses of the virtual IP’s that are shared by the HA pair.

Reference snapshot:

After that try to access Primary and Auxiliary device on it's original LAN IP from the machine which is part of the LAN segment or LAN Interface of XG HA Pair.

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 IvanildoGalvão over 4 years ago in reply to Vishal_R

I’m only VMware vSphere, I’ll try to enable this on the PortGroup of the virtual Switch.

I need to resolve this doubt today, because at night I will set up an active / passive HA cluster with two XG 230 on the client, I cannot be in doubt when performing this activity.
Cancel
Vote Up 0 Vote Down

Cancel
0 IvanildoGalvão over 4 years ago in reply to Vishal_R

Thanks for the help, it worked, in the case of VMware the fields to enable are different, but that is the same thing as MAC Spoofing.
After enabling, I was able to configure the cluster perfectly, I tested both the active / active and the active / passive.
I'm putting an image here, with the configuration made in the PortGroup of the virtual Switch, in VMware.
Cancel
Vote Up 0 Vote Down

Cancel