We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda SSL VPN

What steps are necessary for a seamless replacement (RMA / Hardware Refresh) of a Barracuda SSL VPN?

  • Type: Knowledgebase
  • Date changed: 4 years ago
Solution #00006774 

Scope:

All Barracuda SSL VPN's, all firmware versions.
Answer:
If you want to swap out one Barracuda SSL VPN's for another seamlessly, as in the case where you receive an RMA or replacement unit, please follow the steps below:
1. Back up all of the old unit's configurations using the Advanced > Backup page, including Configuration and SSL VPN Configuration/Logs (Appliance interface; port 8000 or 8443)
2. Connect the new Barracuda SSL VPN to your network.
3. Connect a monitor and keyboard to the Barracuda and configure the IP, Subnet, Gateway, and DNS settings (as per the [1]Barracuda SSL VPN Quick Start Guide).
4. Log into the new Barracuda's web interface and update the Energize Updates (Advanced > Energize Updates) and firmware (Advanced > Firmware).
5. Load the backup file using the Restore Backup File feature on the Advanced > Backup page of the Barracuda's web interface. If you receive a checksum error, please see [2]Solution #00001406.
6. Direct all relevant network traffic away from the old Barracuda (if it is still active) and to the new Barracuda.
7. Shut down and remove the old Barracuda.
Alternatively, if you don't want to change any of your other network settings, you can remove your old Barracuda SSL VPN, replace it with your new Barracuda SSL VPN, and assign your old Barracuda SSL VPN's IP address to your new Barracuda Spam & Virus Firewall. This could result in downtime during the switch because two devices cannot coexist on the same network with the same IP address.
Additional Notes:
Make sure you have a backup copy of your existing certificate and private key as this will need to be re-uploaded if you installed a trusted certificate.
If you are replacing a Barracuda Spam & Virus Firewall in a cluster, the recommended procedure is a little different. You do not need to create and restore backup files because the cluster will force a synchronization of all configuration settings. Follow these steps instead: (Appliance interface; port 8000 or 8443)
1. On the unit you are removing (old unit) go to the Advanced->Linked Management page and remove the shared secret.The unit will log you out.
2. Log back into the "old unit" and give it a new unique IP address. This allows you to access it for historical logs (step 2 is not required, but can be useful when looking for old messages).
3. Log into all other units in the cluster, go to the Advanced->Linked Management page, and use the "trashcan" to remove the "old unit" from their cluster setting(s).
4. Put the new/replacement unit on line. Using the CONSOLE login, assign it a DIFFERENT IP address then any previously used.
5. Log into the Web Interface for this new/replacement unit. IMPORTANT NOTE: The firmware version of the new/replacement unit must match the firmware version of the units in your existing cluster. If it does not you will need to either update the new/replacement unit, or the units in the cluster as needed. Contact Barracuda Technical Support if you have any questions on updating your firmware.
6. Go to the Basic->IP Configuration page and change the IP address to it permanent address. The unit should log you out and reset.
7. When the login page returns, go to the Advanced->Linked Management page and enter the "Cluster Shared Secret" and save the page (if you do not know the shared secret just update ALL Barracudas to a new shared secret). Note that this will log you out of the web interface.
8. Log back into the new/replacement unit, Go to the Advanced->Linked Management page.
9. Enter the IP address of another unit in the cluster to the "Add System" field.
10. Click the "Join Cluster" button. The clustering should complete in a few minutes but can take up to several hours depending on the amount of configurations/resources..

Link To This Page:
https://campus.barracuda.com/solution/501600000013yqoAAA