Setting up high availability
High Availability (HA) is a configuration where two identical (the same chassis or VM version) firewalls are connected to form a cluster. When clustering is enabled, both systems will form a single entity to the outside and will handle failover for certain problems, so the service remains available to users. These types of monitoring are or can be performed in a cluster member to ensure its own and its peers' health:
- Link monitoring: If an interface goes down, the member fails.
- Path monitoring: If an IP becomes unavailable, the member fails.
- Heartbeat monitoring: The peers periodically send heartbeat packages and hello messages to verify they are up and running.
- Hardware monitoring: The member continually performs packet path health monitoring on its own hardware and fails if a malfunction is detected.
When you enable HA, you need to select a Group ID. This ID needs to be identical on both members. The Group ID will also...