This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HA WAN Monitor

Hi,

What's the determiner for this being up or down, and in turn failing over or not?

Let's say I have this topology:

XG1 WAN > Switch 1 > Router port 1
XG2 WAN > Switch 2 > Router port 2
XG1 LAN > Switch 1 > LAN port 1
XG2 LAN > Switch 2 > LAN port 2

XG1 goes offline (either completely, WAN port or LAN port) = should fail over to XG2
Switch 1 goes offline = should fail over to XG2
Router port 1 goes offline, but Switch 1 is still up = should fail over to XG2

In the last one, if the Switch that XG1 WAN port is connected to is still actually up, would a WAN monitored port still be seen as up and not fail over?

Thanks

This thread was automatically locked due to age.

0 FormerMember over 4 years ago

Hi Lanky Doodle,

Thank you for reaching out to the Community!

Did you configure your firewalls with High Availability? Did you configure Active/Active or Active/Passive mode?

The firewall will failover if the HA monitoring ports go down due to the hardware issues.

Please check out the following document for more info: Sophos XG Firewall: How to configure High Availability

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Lanky Doodle over 4 years ago in reply to FormerMember

We're in Active/Passive mode at the moment.

Unknown said:
The firewall will failover if the HA monitoring ports go down due to the hardware issues

Yeah so I interpret that as if it's the router port that goes down XG will see the WAN port as up as the device it's connected to will be up. Even though the WAN port now has no route to the internet.

I suppose a better way is saying I need to monitor beyond the XGs nearest neighbour.
Cancel
Vote Up 0 Vote Down

Cancel