Article Applies To:
Affected SonicWALL Security Appliance Platforms:
Gen5: NSA E7500, NSA E6500, NSA E5500, NSA 5000, NSA 4500, NSA 3500, NSA 2400MX, NSA 2400, NSA 240
Gen4: PRO series: PRO 5060, PRO 4100, PRO 4060,PRO 3060, PRO 2040.
TZ series: TZ 210, TZ 210 Wireless.
Affected Firmware versions: All Gen5 and Gen4 firmware versions (SonicOS Enhanced)
Affected Services: High Availability.
This section describes how to associate two SonicWALL appliances as a High Availability Pair on mysonicwall.com, and shows an example high availability configuration on SonicOS Enhanced.
You can associate two SonicWALL security appliances as HA Primary and HA Secondary on mysonicwall.com. Note that the Backup appliance of your High Availability pair is referred to as the HA Secondary unit on mysonicwall.com. After the appliances are associated as an HA Pair, they can share licenses.
You must purchase a single set of security services licenses for the HA Primary appliance. It is not required that the Primary and Backup appliances have the same security services enabled. The security services settings will be automatically updated as part of the initial synchronization of settings.
To use Stateful High Availability, you must purchase a Stateful High Availability Upgrade license for the Primary unit. Stateful High Availability is a licensed service that must be activated for the Primary appliance on mysonicwall.com. The license is shared with the Backup unit.
License synchronization is used in a high availability deployment so that the Backup appliance can maintain the same level of network protection provided before the failover. To enable high availability, you can use the SonicOS management interface to configure your two appliances as a High Availability pair in Active/Idle mode.
Mysonicwall.com provides several methods of associating the two appliances. You can start by registering a new appliance, and then choosing an already-registered unit to associate it with. Or, you can associate two units that are both already registered. Or, you can start the process by selecting a registered unit and adding a new appliance with which to associate it.
Note: After registering new SonicWALL appliances on mysonicwall.com, you must also register the Backup appliance from the SonicOS management interface while logged into its
individual management IP address. This allows the Backup unit to synchronize with the SonicWALL license server and share licenses with the associated Primary appliance.
Configuration Procedures on MySonicWALL
You can associate a SonicWALL security appliance with another appliance of the same model when you first register it, or at any time after both appliances are already registered on mysonicwall.com. Procedures for different scenarios are provided in the following sections:
• "Associating an Appliance at First Registration" refer KBID 6233
• Associating Pre-Registered Appliances
• “Associating a New Unit to a Pre-Registered Appliance” refer KBID 6236
• “Removing an HA Association” refer KBID 6230
• “Replacing a SonicWALL Security Appliance” refer KBID 6231
Note: You can remove an appliance from an association at any time.
Associating Pre-Registered Appliances
To associate two already-registered SonicWALL security appliances so that they can use High Availability license synchronization, perform the following steps:
Step 1: Login to mysonicwall.com.
Step 2: On the main page under Most Recently Registered Products, click View all registered products.
Step 3: On the My Products page, under Registered Products, scroll down to find the appliance that you want to use as the parent, or Primary, unit. Click the product name or serial number.
Step 4: On the Service Management - Associated Products page, scroll down to the Associated Products section.
Step 5: Under Associated Products, click HA Secondary.
Step 6: On the My Product - Associated Products page, in the text boxes under Associate New Products, type the serial number and the friendly name of the appliance that you want to associate as the child/secondary/Backup unit.
For Configuring High Availability in SonicOS Enhanced refer KBID 6234
Source: SonicOS Enhanced 5.1 Administrator Guide