Software restrictions of hot standby on the USG9000 series

Software restrictions of hot standby: 1. The software versions on the active and standby devices must be the same. 2. The BootROM versions on the active and standby devices must be the same. 3. The hash board selection modes and hash factors on the active and standby devices must be the same. 4. In hot standby deployment, the consistency between the active and standby device configurations is checked every 24 hours. It is required that the security policies, NAT policies, traffic policies, audit policies, and PBRs on the active and standby devices be exactly the same. The configuration sequences between policies must also be the same. 5. You are advised to use the initial configuration file on both devices. 6. The service interfaces and heartbeat interfaces used by active and standby devices must be the same. 7. The interfaces on the same slot of the active and standby devices must be added to the same security zone. 8. The interfaces with vrrp virtual-mac enable configured cannot function as the heartbeat interfaces. 9. The service interfaces of the active and standby devices use fixed IP addresses. Therefore, you cannot use the dual-system hot backup function together with functions for obtaining IP address automatically, such as PPPoE dial-up, DHCP client, 3G, and XDSL. 10. The MTU of the heartbeat interfaces must be set to 1500. 11. When hot standby is used together with the virtual system, you need to ensure that the VSYS names and IDs on the active and standby devices are the same.

Scroll to top