Got it
Huawei Enterprise Support Community
Community Forums Security
Can two USG6510E work in ...

Can two USG6510E work in some kind of active/standby mode?

Created: Jun 9, 2021 15:43:25Latest reply: Aug 30, 2021 15:43:02 441 14 0 0 0
  Rewarded HiCoins： 0 (problem resolved)
View the author 1#

Hello Team,


Please advice. 

I've found that USG6510E cannot have dual-system hot standby scenario in the hard way. 

Still I have to think of a solution when one FW fail , the services will continue to work on the backup one.


Is there a way to make them work in some sort of active/standby mode.  I need that redundancy.


Best Regards,

Mladen

Firewall HA

Like (0) Dislike (0) Favorite(0) Share Report
Previous: What Is a Security Policy? How to Create It?
Next: What is IPsec? How Does IPsec Work?
Featured Answers

Best answer

Recommended answer

(0) (0)
chenhui
Admin Created Jun 10, 2021 01:09:53

Hi,
I'm sorry but the USG6510E/6510E-POE/6530E don't support the hot standby (please refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100149308&id=EN-US_TOPIC_0188403957&lang=en). If you want to use the standby, the only way is to copy the configuration from the running firewall to the standby one, but you should keep the two firewalls configuration, firmware version, and cable insertion same.

View more
  • x
  • convention：
All Answers
(0) (0)
2#
ariase88
ariase88 Admin Created Jun 9, 2021 16:04:46

Thanks for contacting the Huawei community!

We are checking your question and will provide an answer to you shortly...
View more
  • x
  • convention：
(0) (0)
3#
wissal
wissal MVE Created Jun 9, 2021 17:33:00

Hello,

The firewall works at layer 2.

Active/Standby Mode: Please refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100149308&id=EN-US_TASK_0178925196&lang=en

Load Balancing Mode: On a network where service interfaces of firewalls work at Layer 2 and connect to switches in the upstream and downstream directions, it is recommended that firewalls work in active/standby mode. Load balancing is not recommended.

The firewall works at layer 3.

Active/Standby Mode: Please refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100122846&id=EN-US_TASK_0178925196&lang=en

Load Balancing Mode: Please refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100122846&id=EN-US_TASK_0178925337&lang=en

Note:

You need to replace the link in the example with an Eth-Trunk link.

I hope it helps!

Thanks


View more
  • x
  • convention：

user_4131633
user_4131633 Created Jun 9, 2021 18:05:36 (0) (0)
I am missing something? Choose System > High Availability > Dual-System Hot Standby and click Edit. This is not available in the menu.  
(0) (0)
4#
chenhui
chenhui Admin Created Jun 10, 2021 01:09:53

Hi,
I'm sorry but the USG6510E/6510E-POE/6530E don't support the hot standby (please refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100149308&id=EN-US_TOPIC_0188403957&lang=en). If you want to use the standby, the only way is to copy the configuration from the running firewall to the standby one, but you should keep the two firewalls configuration, firmware version, and cable insertion same.

View more
  • x
  • convention：
(0) (0)
5#
user_4131633
user_4131633 Created Jun 10, 2021 07:24:04

What is the cheapest USG firewall that support the Hot-standby. I mean near the price of 6510E that we can order, because we are small office. but need that redundancy and all the other features.
View more
  • x
  • convention：
(1) (0)
6#
chenhui
chenhui Admin Created Jun 10, 2021 07:37:13

Posted by user_4131633 at 2021-06-10 07:24 What is the cheapest USG firewall that support the Hot-standby. I mean near the price of 6510E that ...
From the link previous, and consider the naming conventions, I think that USG6515E would be the cheapest USG firewall that supports the hot standby redundancy.
Whatever, you are suggested that you consult the presale engineers.
View more
  • x
  • convention：

user_4131633
user_4131633 Created Jun 29, 2021 10:35:55 (0) (0)
Thank you Chenhui, I am not sure but can that HA scenario be done with CIsco Catalyst switches ?
Huawei USG and CIsco switches will they do that VRRP and OSPF configuration for Hot-Standby from Huawei?  
chenhui
chenhui Reply user_4131633  Created Jun 29, 2021 10:57:54 (0) (0)
I don't think so. Firewall HSB requires heart-beat packets exchanging, and that wouldn't work between different vendors.  
user_4131633
user_4131633 Reply chenhui  Created Jul 1, 2021 08:17:16 (0) (0)
They say It can do VRRP between cisco switches and huawei firewalls HSB is between FWs and VRRP groups can be created.  
chenhui
chenhui Reply user_4131633  Created Jul 1, 2021 09:56:53 (0) (0)
Yes, but the VRRP group doesn't synchronize the items between the Huawei and Cisco device, in other words, the service migration will experience longer business interruptions.  
user_4131633
user_4131633 Reply chenhui  Created Jul 7, 2021 11:20:52 (0) (0)
hi Chenhui could you propose me a good firewall for 5 years minimum usage from now , that have the power to hold min 200 IPSec site-to-site tunnels and activated IPS and AV for like 1000 max employees and have HA and maybe hot swap hdd and power modules. Like Enterprise class not desktop nor smb or medium , but mostly large business , enterprise class for our HQ office ?  
chenhui
chenhui Reply user_4131633  Created Jul 8, 2021 01:10:45 (0) (0)
Hello, I'm sorry, but I don't get the firewalls' specifications either. Please, you can consult the local Huawei presale engineer or channel engineers.  
View more replies
(0) (0)
7#
Unicef
Unicef MVE Created Aug 30, 2021 13:52:03

Cool answers
View more
  • x
  • convention：
(0) (0)
8#
LilStylz237
LilStylz237 Created Aug 30, 2021 15:43:02

Thanks for informations
View more
  • x
  • convention：
Back to list

Comment

Advanced
B Color Image Link Quote Code Smilies
You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login
Huawei Website Support About Huawei Privacy User Agreement Terms of Use Cookies Cookie Settings
Huawei Enterprise Huawei Carrier Forum Training & Certification

Contact Us: e_online@huawei.com Copyright © 2022 Huawei Technologies Co., Ltd. All rights reserved.

APP

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.