Article Applies To:
Affected SonicWALL Security Appliance Platforms:
Gen5: NSA E7500, NSA E6500, NSA E5500, NSA 5000, NSA 4500, NSA 3500, NSA 2400, NSA 240
Gen4: PRO series: PRO 5060, PRO 4100, PRO 4060,PRO 3060, PRO 2040.
TZ series: TZ 210, TZ 210 Wireless.
Affected Firmware versions: All Gen5 and Gen4 firmware versions (SonicOS Enhanced)
Affected Services: High Availability.
This section describes how to associate two SonicWALL appliances as a High Availability Pair on mysonicwall.com, and shows an example high availability configuration on SonicOS Enhanced.
You can associate two SonicWALL security appliances as HA Primary and HA Secondary on mysonicwall.com. Note that the Backup appliance of your High Availability pair is referred to as the HA Secondary unit on mysonicwall.com. After the appliances are associated as an HA Pair, they can share licenses.
You must purchase a single set of security services licenses for the HA Primary appliance. It is not required that the Primary and Backup appliances have the same security services enabled. The security services settings will be automatically updated as part of the initial synchronization of settings.
To use Stateful High Availability, you must purchase a Stateful High Availability Upgrade license for the Primary unit. Stateful High Availability is a licensed service that must be activated for the Primary appliance on mysonicwall.com. The license is shared with the Backup unit.
License synchronization is used in a high availability deployment so that the Backup appliance can maintain the same level of network protection provided before the failover. To enable high availability, you can use the SonicOS management interface to configure your two appliances as a High Availability pair in Active/Idle mode.
Mysonicwall.com provides several methods of associating the two appliances. You can start by registering a new appliance, and then choosing an already-registered unit to associate it with. Or, you can associate two units that are both already registered. Or, you can start the process by selecting a registered unit and adding a new appliance with which to associate it.
Note: After registering new SonicWALL appliances on mysonicwall.com, you must also register the Backup appliance from the SonicOS management interface while logged into its
individual management IP address. This allows the Backup unit to synchronize with the SonicWALL license server and share licenses with the associated Primary appliance.
Configuration Procedures on MySonicWALL
You can associate a SonicWALL security appliance with another appliance of the same model when you first register it, or at any time after both appliances are already registered on mysonicwall.com. Procedures for different scenarios are provided in the following sections:
• Associating an Appliance at First Registration
• “Associating Pre-Registered Appliances” refer KBID 6235
• “Associating a New Unit to a Pre-Registered Appliance” refer KBID 6236
• “Removing an HA Association” refer KBID 6230
• “Replacing a SonicWALL Security Appliance” refer KBID 6231
Note: You can remove an appliance from an association at any time.
Associating an Appliance at First Registration
To register a new SonicWALL security appliance and associate it as a Backup unit to an existing Primary unit so that it can use High Availability license synchronization, perform the following steps:
Step 1: Login to mysonicwall.com.
Step 2: On the main page, in the left pane, in the text box under Quick Register, type the appliance serial number and then press Enter or click the arrow button.
Step 3: On the My Products page, under Add New Product, type the friendly name for the appliance and the authentication code into the appropriate text boxes, and then click Register.
Step 4: On the Product Survey page, optionally fill in the requested information and then click Continue.
Step 5: On the Create Association Page, click the radio button for the SonicWALL appliance that you want to act as the parent, or Primary, unit in the High Availability pair. You can skip this step if you want your new appliance to be a Primary unit itself.
The screen displays only units that are not already Backup units for other appliances. Do one of the following:
• To make this appliance a Primary unit, click Continue without clicking a radio button.
• If one appliance is available as the parent product (Primary unit), click the radio button to select it, and then click Continue.
• If multiple appliances are available for the parent product, click the radio button for the one you want, and then click Continue.
Step 6: If you clicked Continue without selecting a choice for HA Primary in the preceding step, click the radio button under Child Product Type to select a choice for HA Secondary (Backup unit), and then click Continue. Your new appliance will be the HA Primary unit for the device that you select.
Step 7: On the next screen, you can verify that your product registered successfully and, at the bottom under Parent Product, verify the correct appliance and serial number for the parent (or child, if you chose that option).
You can click the Serial Number link for the parent product to display the Service Management - Associated Products page and verify that the newly registered appliance is listed as a child product associated with this parent.
You can click HA Secondary to display the My Product - Associated Products page for the child/secondary/Backup, unit. Note that you can also change the associated product (parent) for this child on this page.
For Configuring High Availability in SonicOS Enhanced refer KBID 6234
Source: SonicOS Enhanced 5.1 Administrator Guide