Description:

This document contains important information that must be observed if you replace LANCOM R&S®Unified Firewalls that are operated in a high-availability cluster (HA cluster).

Requirements:

  • LANCOM R&S®Unified Firewalls operated in an HA cluster
  • Identical LCOS FX firmware version on all LANCOM R&S®Unified Firewalls in the HA cluster (download)
  • Web browser for configuring the Unified Firewall.

    The following browsers are supported: 
    • Google Chrome
    • Chromium
    • Mozilla Firefox

Scenarios:

  • Scenario 1: For an HA cluster consisting of two LANCOM R&S®Unified Firewalls, the Unified Firewall to be exchanged does not contain a license.
  • Scenario 2: For an HA cluster consisting of two LANCOM R&S®Unified Firewalls, the Unified Firewall to be exchanged contains the license.

Procedures:

1. Replacing the Unified Firewall that does not contain a license:

1.1) To be on the safe side, always create a backup of the current configuration. The procedures are described in the article Creating and importing a configuration backup of a LANCOM R&S®Unified Firewall.

1.2 Then physically remove  the Unified Firewall to be exchanged from the HA cluster.

1.3) The exchange device (the new Unified Firewall) can now be included into the HA cluster. The device automatically obtains its license and configuration from the original licensed HA cluster device.

2. Replacing the Unified Firewall that contains the license:

2.1) To be on the safe side, always create a backup of the current configuration. The procedures are described in the article Creating and importing a configuration backup of a LANCOM R&S®Unified Firewall.

2.2) IMPORTANT: Before you remove the licensed device from the HA cluster, you must have the license file for the (new) exchange device or ensure that the exchange device already contains the license.

2.3) Make sure that the (new) exchange device has the same LCOS FX firmware version as that of the second HA cluster device (the unlicensed device).

2.4) The licensed exchange device (the new Unified Firewall) can now be included into the HA cluster.