Quelle anzeigen

Description:

This document contains important information that must be observed if you replace LANCOM R&S®Unified Firewalls that are operated in a high-availability cluster (HA cluster).

Requirements:

LANCOM R&S®Unified Firewalls operated in an HA cluster
Identical LCOS FX firmware version on all LANCOM R&S®Unified Firewalls in the HA cluster (download)
Web browser for configuring the Unified Firewall.

The following browsers are supported:
- Google Chrome
- Chromium
- Mozilla Firefox

Scenarios:

Scenario 1: For an HA cluster consisting of two LANCOM R&S®Unified Firewalls, the Unified Firewall to be exchanged does not contain a license.
Scenario 2: For an HA cluster consisting of two LANCOM R&S®Unified Firewalls, the Unified Firewall to be exchanged contains the license.

Information on licensing for an HA cluster is available in the article Licensing when using two LANCOM R&S®Unified Firewalls in the HA cluster (High Availability).
Note that a factory reset of the Unified Firewall deletes the license file contained in the device! The Unified Firewall must then be licensed again.
- You receive the license file for a licensed Unified Firewall from the Firewall License Portal (you will need myLANCOM access).

Procedures:

1. Replacing the Unified Firewall that does not contain a license:

1.1) To be on the safe side, always create a backup of the current configuration. The procedures are described in the article Creating and importing a configuration backup of a LANCOM R&S®Unified Firewall.

1.2 Then physically remove the Unified Firewall to be exchanged from the HA cluster.

1.3) The exchange device (the new Unified Firewall) can now be included into the HA cluster. The device automatically obtains its license and configuration from the original licensed HA cluster device.

2. Replacing the Unified Firewall that contains the license:

2.1) To be on the safe side, always create a backup of the current configuration. The procedures are described in the article Creating and importing a configuration backup of a LANCOM R&S®Unified Firewall.

2.2) IMPORTANT: Before you remove the licensed device from the HA cluster, you must have the license file for the (new) exchange device or ensure that the exchange device already contains the license.

2.3) Make sure that the (new) exchange device has the same LCOS FX firmware version as that of the second HA cluster device (the unlicensed device).

2.4) The licensed exchange device (the new Unified Firewall) can now be included into the HA cluster.