D-Link NetDefend DFL-CP310 User Manual page 137

•
You must have at least two identical NetDefend firewalls.
• The appliances must have identical firmware versions and firewall rules.
• The appliances' internal networks must be the same.
• The appliances must have different real internal IP addresses, but share the
same virtual IP address.
• The appliances' synchronization interface ports must be connected either
directly, or via a hub or a switch. For example, if the DMZ is the
synchronization interface, then the DMZ/WAN2 ports on the appliances
must be connected to each other.
The synchronization interface need not be dedicated for synchronization only. It
may be shared with an active internal network.
You can configure HA for any internal network, except the OfficeMode network.
Note: You can enable the DH
Gateway's DHCP server
Gateway fails.
Note: If you configure HA for the WLAN network:
•
A passive appliance's wireless transmitter will be disabled until the
gateway becomes active.
•
The two WLAN networks can share the same SSID and wireless
frequency.
•
The WLAN interface cannot serve as the synchronization interface.
Chapter 5: Managing Your Network
CP server in all NetDefend firewalls. A Passive
will start answering DHCP requests only if the Active
Configuring High Availability
121