SonicOS 8 High Availability

Table of Contents

High Availability Config

The High Availability Config section on the DEVICE | High Availability > Status page provides the following information:

  • HA Mode - Indicates one of:
    • None - High Availability is not enabled on the unit.
    • Active/Standby - Active/Standby mode provides basic high availability with the configuration of two identical firewalls as a High Availability Pair. By default, Active/Standby mode is stateless, meaning that network connections and VPN tunnels must be re-established after a failover. To avoid this, Stateful Synchronization can be licensed and enabled with Active/Standby mode.
    • Active/Active DPI - Distributes eligible DPI processing between the two firewalls of a Stateful HA pair. The Active firewall forwards all traffic and handles routing, firewall enforcement, NAT, and session management. The Standby firewall processes offloaded DPI traffic through the dedicated Active/Active DPI interface. Offloading is controlled by the Active/Active DPI Traffic Offload % and Active/Active DPI CPU Threshold % settings. The pair has one traffic-forwarding firewall.
  • HA Control Link - Indicates the port, speed, and duplex settings of the HA control link, such as X6 1 Gbps Full Duplex. When High Availability is not enabled, the field displays not configured. The HA control link is used to communicate heartbeats and other control traffic between the units. If the HA control link fails, X0 is used to communicate heartbeats between units; therefore heartbeats on both units should be in the same broadcast domain.
  • HA Data Link - Indicates the port, speed, and duplex settings of the HA data link, such as X7 1 Gbps Full Duplex. When High Availability is not enabled, the field displays not configured. The HA data link transfers stateful data to keep session data synchronized between the units. The HA Data Link is not required in non-stateful HA. It is required in Stateful HA and Active/Active DPI.
  • Active/Active DPI Link - Indicates the port, speed, and duplex settings of the dedicated Active/Active DPI link when the mode is Active/Active DPI. This field is not displayed in other modes.