Manage configuration updates and monitoring for your HA clusters. Configuration changes on the primary unit are transferred instantly to the secondary unit. The sync status can be viewed from Barracuda Firewall Admin. If the primary unit fails, configuration changes must be made on the secondary unit. After the primary unit is re-established, synchronization must be started manually.

Check the Services Status

• On the primary and secondary unit:

  • Go to CONTROL > Services.

  • Verify that the status of the PRIMARY is Active and the status of the SECONDARY is Standby.

Open

When the primary unit goes down, both units change their state accordingly:

Open

HA Sync Status Setup

1. Go to CONFIGURATION.

2. Expand the State Info drop-down menu in the upper-right corner and click HA Sync.
   

   Open

   

3. In the HA Box Synchronization window, you have the option to trigger the following tasks:

   • Do Update – Performs an incremental update.

   • Do Complete Update – Performs a complete update.

   • Discard Update – Discards the changes. This is needed when the two HA partners are in an inconsistent state.

   • Refresh – Refreshes the window to see actual changes (completion of update).

   Open

   

Emergency Override

If the primary unit fails, configuration changes must be made on the secondary unit using the Emergency Override mode.

1. Log into the secondary unit.

2. From the Configuration Tree, right-click Box (Backup) and select Emergency Override.
   

3. When prompted, click Yes to enable the Emergency Override mode. When the Emergency Override mode is active, the box icon is highlighted in yellow.

4. Lock and edit your configurations.

5. Click Send Changes and Activate.

Manually Synchronize a Stand-Alone HA Pair

In Emergency Override mode, manually synchronize configurations from the secondary unit to the primary unit. After the connection to the primary unit is re-established, synchronization must be restarted manually. The following steps assume that services are still active on the secondary unit.

1. On the primary unit, go to CONFIGURATION.

2. From the service bar, expand the State Info icon and click HA Sync.
   

   Open

   

3. Select the Clear Dirty Status button.

4. Open the Configuration Tree on the secondary unit and click HA Sync.

5. Enter the IP addresses of the HA partners into the IP address fields of the HA Box Synchronization window.

6. Click Do Update to transfer the configuration from the secondary unit to the primary unit.

7. Enter the IP address of the primary unit into the HA Partner IP field.

8. Enter the IP address of the secondary unit into the Sender IP to use field.

9. Select the Change Address check boxes to the right of both fields.

10. Click Do Complete Update.

11. Block services on the secondary unit so that the primary unit can regain normal operation status.

Configure IP Address and Service Monitoring

To enable handling of failure conditions and to guarantee a quick takeover of services when a box or networking component becomes unavailable, configure the monitoring of IP addresses and services.

For more information, see HA-Monitoring .