I just purchased two SG210’s to use in an Active/Passive HA setup. I have configured the first firewall and installed the license, but when I turn on HA, connect both firewalls on port eth3 to each other, and turn on the second firewall, I just get HA SLAVE STATUS ERROR on the first firewall’s screen.
Here is what the HA logs show:
2014:06:30-16:54:16 firewall2-1 ha_daemon[3911]: id="38A3" severity="debug" sys="System" sub="ha" name="Netlink: Found link beat on eth0 again!"
2014:06:30-16:55:31 firewall2-1 ha_daemon[3911]: id="38A3" severity="debug" sys="System" sub="ha" name="Netlink: Found link beat on eth3 again!"
2014:06:30-16:55:34 firewall2-1 ha_daemon[3911]: id="38A0" severity="info" sys="System" sub="ha" name="Autojoin of 198.19.250.198 denied!”
I also tried configuring the second firewall by importing the configuration from the first firewall, minus the licensing. The second firewall never switches the IP range for the LAN, however, so when I do it I have to setup the LAN IP range manually. I tried factory resetting it and reconfiguring it several times, but this issue the the LAN IP range, and the issue with the HA SLAVE STATUS ERROR and “auto join denied” errors keep showing up.
Do I also only need one license with all of the subscriptions for Active/Passive, or do I need two? The documentation says one, but I just can’t figure out why HA auto join is being denied.
This thread was automatically locked due to age.
