Barracuda NextGen Firewall F-Series systems are organized into a two-level hierarchy on the Barracuda NextGen Control Center. A common use would be to create ranges for regions such as North America and EMEA and then create clusters for each country in the region. Configuration and default settings shared by multiple F-Series Firewalls can be configured on the cluster or range level. To create reusable configurations for multiple firewalls, use a repository. The configuration of an individual system can then be linked or copied from a range or global repository making it easy to deploy a change to all managed systems.
In this article:
Create a Range
You must create at least one range on a Control Center.
- Click the CONFIGURATION tab.
- Right-click Multi-Range and select Create Range.
- Enter a Range Number.
- (optional) Enter a Description.
- (optional) Enter the contact details in the Contact Info field.
- Configure the range properties as described in the Specific Settings section.
- Click Next.
- Enter the owner and purchase details in the information sections.
- Click Finish.
- Click Activate.
Remove a Range
- Click the CONFIGURATION tab.
- Right-click the range you wish to remove and click Lock.
- Right-click the range and select Remove Range.
- Click OK to confirm the deletion.
- Click Activate.
Create a Cluster
Unless you are using a Standard Edition Control Center, there is no limit on how many clusters you can create.
- Click the CONFIGURATION tab.
- Expand Multi-Range, right-click your desired range and select Create Cluster.
- Select the software release of the Barracuda NextGen Firewall F-Series boxes that should be managed and click OK.
- Enter a descriptive Cluster Name.
Enter the contact details.
- Configure the cluster properties as described in the Specific Settings section.
- Click Next.
- Enter the owner and purchase details in the information sections.
- Click Finish.
- Click Activate.
Remove a Cluster
- Click the CONFIGURATION tab.
- Navigate to the cluster you wish to remove.
- Right-click the cluster and click Lock.
- Right-click the cluster and select Remove Cluster.
- Click OK to confirm the deletion.
- Click Activate.
Range and Cluster Specific Settings
Each range and cluster can override global settings by using its own configuration interface. When enabling these settings the scope is limited to the range or cluster it is set for.
Migrating the Configuration
Migration can only be performed the next major firmware version (5.0 > 5.2 > 5.4 > 6.0 > 6.1).
Migrating a Repository Linked Unit
If you are using a repository you must prepare the repository linked units before migration:
For information, see How to Prepare Repository Linked Box Configurations for Migration.
- Click the CONFIGURATION tab.
- Expand Multi-Range and navigate to the desired object in the Repository tree.
- Right click the object and click Lock.
- Right click the object and select Migrate Node.
- Choose the version number as migration destination and click OK to confirm the migration.
- Click Activate.
Migrate a Cluster or Range
Clusters can only be migrated to a higher firmware version. You can not downgrade a cluster configuration.
- Click the CONFIGURATION tab.
- Navigate to the cluster or range you wish to migrate.
- Right-click the cluster or range and click Lock.
- Right-click the cluster and select Migrate Cluster / Migrate Range.
- Choose the version number as migration destination and click OK to confirm the migration.
Review the future configuration.
- Click Activate .
Migrate Multiple Clusters and Ranges
- Click the CONFIGURATION tab.
- Right-click Multi-Range and select Migrate Clusters/Ranges from the context menu.
- Select the nodes to be migrated while holding down the SHIFT key.
- Click OK to confirm the migration.
- Click Activate.