Configuring HA with Dynamic WAN Interfaces

The configuration tasks on DEVICE | High Availability > Settings are performed on the Active firewall and then are automatically synchronized to the Standby firewall.

To configure HA with a dynamic WAN interface

1. Navigate to NETWORK | System > Interfaces.
2. Configure a WAN interface as PPPoE, as described in Configuring a WAN Interface in the SonicOS 8 System document.
3. Navigate to DEVICE | High Availability > Settings.
4. In the GENERAL SETTINGS section, do the following:
   1. From the Mode drop-down menu, select Active/Standby.
   2. If a dialog displays, read the message and click OK.
   3. Verify that Enable Stateful Synchronization is not selected. This option is not selected by default. Stateful HA requires a license on some platforms.
   4. Ensure Enable Preempt Mode is not selected. This option is not selected by default.
   5. Select Enable Virtual MAC to allow the Primary and Secondary firewalls to share a single MAC address. This greatly simplifies the process of updating network ARP tables and caches when a failover occurs. This option is not selected by default.
   6. If PPPoE Unnumbered is configured, you must select Enable Virtual MAC.

      Only the switch to which the two firewalls are connected needs to be notified. All outside devices continue to route to the single shared MAC address.

5. Configure HA Devices and HA Interfaces options as described in Configuring Active/Standby High Availability Settings.
6. Click Accept.

7. Navigate to DEVICE | High Availability > Monitoring.

   

8. Select the PPPoE interface and click the Edit icon.

   Interface Monitoring Settings dialog is displayed.

   

9. Verify that Physical/Link Monitoring is selected. This option is selected by default.
10. Ensure the Primary IPv4 Address and Secondary IPv4 Address fields are set to 0.0.0.0.
11. Ensure none of the other options are selected.
12. Click OK.