We recently purchase a licence for a ASG320 HA cluster ( active / active mode) with two nodes. Currently, we have an ASG320 HA cluster ( active /passive mode) with two nodes and we want to build an active / active cluster with this new licence. But first, I have to know the features of an HA cluster in active / active mode.
or, use a switch in link aggregation (LACP 802.3ad mode) and connect Sophos XG Firewall ( active -passive cluster ) in a bridged mode. Use the network medium that is capable of forwarding non-routable multicast packets.
2/23/2020 · If you have a Sophos cluster ( Active – Active ) license, you can use the same license file to upgrade each appliance in the cluster . If you have an Active -Passive setup, use your license file for the Active device – the Active device must be the one running any subscriptions you have purchased and want to migrate.
Connect the XG Firewall devices using a network cable plugged into the dedicated HA port on both units. Sign in to the web admin console of the primary XG Firewall device and go to System services > High availability. Select Primary (Active-Passive) as the Initial device role Ensure QuickHA is selected. You’ll see default settings (which you can change), as described in the.
Sophos XG Firewall: High Availability CLI tools, Configure active-passive HA using QuickHA – Sophos, Configure active-passive HA using QuickHA – Sophos, Sophos XG Firewall: How to configure High Availability, Only the Active appliance requires subscriptions and SF-OS will ensure that the Passive appliance has a copy of those subscriptions, so it can take on processing if the Active appliance fails. It is therefore vital that the subscriptions are activated on the intended Active appliance and one has to ensure that HA is enabled only from the appliance which has a valid subscription.
How to use interactive mode to configure an active-passive HA cluster. To configure active-passive HA , do as follows: Sign in to the firewall that will be the auxiliary device. Go to System services > High availability. Specify the initial HA device state.
5/2/2020 · This article provides information on the Sophos XG Firewall High Availability (HA) console commands and advanced shell commands for HA troubleshooting. The following sections are covered: High Availability commands. Console commands. HA load-balancing on/off Show HA cluster details Disable HA Advanced Shell commands, 3/24/2017 · Orderly Shutdown of XG HA Cluster from GUI When the admin selects shutdown in the GUI if the XG Firewall is part of a HA arrangement either Active /Passive or Active / Active it would be a good idea to automatically conduct an orderly shutdown / restart of the HA cluster in a seamless manner. This could avert the potential for any corruption related to sync failures etc.
