WSM User Guide - WatchGuard Technologies

Configuring HA for Firebox X (non e-Series) Devices3 Click Yes to reset the Firebox to its default state and configure it as the secondary HA Firebox in theHA pair.You must type the configuration passphrase for the secondary HA Firebox.4 Use a crossover cable to connect the HA1 interface (eth7) on one Firebox to the HA1 interface onthe other Firebox. If HA2 (eth6) is enabled, connect both HA2 interfaces as well.5 Open Firebox System Manager for the primary HA Firebox and select Tools > High Availability >Synchronize Configuration. When prompted, type the configuration passphrase.You see a message that says High Availability is enabled.Configuring HA for Firebox X (non e-Series) Devices1 From Policy Manager, select Network > High Availability.The High Availability dialog box appears.2 Select the Enable High Availability check box.3 Select the HA1 check box for the interface to enable for High Availability.4 In the Primary Box IP text box, you can change the default IP address. This IP address should befrom a reserved or unassigned network. This becomes the permanent IP address for that interface.5 In the Secondary Box IP text box, type an IP address from the same subnet as the interface withHigh Availability enabled on the active Firebox®.6 Select the HA2 check box to enable the HA2 interface.The HA2 interface is optional.7 Use the Group ID value control to identify this HA group on the network. If you use more than oneHA pair on the same network, this number must be different for each pair.8 Click the Yes radio button to encrypt all HA traffic between the Fireboxes. This is usually notnecessary, and uses more resources.orClick the No radio button to not encrypt HA traffic between the Fireboxes.346 WatchGuard System Manager