Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 39 subscribers
  • Views 1062 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG HA Active-Passive configuration - multiple interfaces

alessandro scuderi

Hello,

I would like to configure HA on a XG125 applicance in active-passive mode and I'd like to understand how it works in a multiple interface configurations, for instance 6-7.

I am referring on community.sophos.com/.../123174 for the setup, and I don't understand the behaviour in case of a failover in multiple interfaces configuration.

In my configuration the XG125 is the gateway for multiple vlan configured on different interfaces.

- In HA active-passive mode, same gateway IP of all interfaces will be configured on auxiliary device?

- I suppose that I should connect a cable from passive device to each switch where the primary device is connected, in order to make sure failover works.

 

I hope that my explanation was clear, if not please ask me all needed.

 

Best regards,

Alessandro Scuderi



This thread was automatically locked due to age.
  • 0

    Hi  

    When you configure the HA Active - Passive as suggested in the article, Passive device has the same configuration details available as Active device, when failover happens and Passive device will act as Active device and start serving network traffic, It is required to have same network connectivity you have made with Active device in order to successful failover to serve all the network traffic.

    In the given article, there is a reference network diagram that has LAN and DMZ on separate interfaces but through switch both LAN and DMZ connected to both firewall devices. So as suggested above network connectivity should be the same with Active and Passive device so that when failover happens all the traffic forwarded to the passive device.

    Regards,

    Keyur
    Community Support Engineer | Sophos Support
    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'This helped me' link

Unfiltered HTML