Dell SonicWALL Secure Mobile Access 8.5Administration Guide 330Supported PlatformsHigh Availability is supported on the SMA 400, SRA 4600, and the SMA 500v Virtual Appliance.Configuring High AvailabilityHigh Availability (HA) requires one SMA 400, SRA 4600, or SMA 500v Virtual Appliance configured as a primarydevice and an identical SMA/SRA configured as a backup device. The HA connection between two SMA/SRAappliances is in an Active/Passive state. The session information is synchronized between the HA pair to helpavoid re-authentication of users in the event of a failover to the backup device.See the following sections for configuration information:• Physical Connectivity on page 330• Preparing for High Availability on page 330• Configuring High Availability Settings on a hardware appliance on page 331• Enabling Interface Monitoring on page 334• Configuring Network Monitoring Addresses on page 335• Configuring Management Settings for Idle Unit on page 335• Synchronizing Firmware on page 336• Synchronizing Settings on page 336• Synchronizing Licenses on page 336Physical ConnectivityYou can select the interface to use for HA control traffic. The HA link should connect the identical ports of theSMA/SRA HA Pair, for example X3 of the primary appliance to X3 of the backup appliance.During normal operation, the primary device is in an active state and services all connections, while the backupdevice is in an idle state. When the primary device loses connectivity, the backup transitions to the active stateand begins to service outside connections.Preparing for High AvailabilityBefore configuring the options on the High Availability > Settings page, prepare your devices for HighAvailability with the following steps:1 Configure both SMA/SRA appliances as separate devices with independent IP addresses on your subnet.2 Upload the latest Secure Mobile Access firmware to both devices. High Availability does not work unlessboth devices have the same firmware version installed.3 Connect the X3 interfaces of the two appliances together with a CAT 5E or better cable to ensure agigabit connection.4 In a browser, log in to the primary unit and navigate to the Network > Interfaces page. Confirm that theX3 port is active by checking the Status that should show 1000 Mbps Full Duplex.NOTE: SMA/SRA appliances in an HA pair cannot be deployed behind a proxy.NOTE: Dell SonicWALL recommends that you backup and download the settings for bothSMA/SRA appliances at this stage.
