We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Application Firewall

How do I link / cluster Barracuda Web Application Firewalls in One Arm Reverse Proxy Mode?

  • Type: Knowledgebase
  • Date changed: 7 years ago

Solution #00003929


Scope:
All Barracuda Web Application Firewalls.

Answer:

Two Barracuda Web Application Firewalls can be linked to create a high availability environment. If the primary unit goes down for any reason the backup unit assumes the role of the primary. This provides continuous network availability.

Primary Unit

  1. Go to the Basic > IP Configuration tab, and fill-in the WAN IP Configuration section. In one arm reverse proxy mode the LAN IP is not configured.
  2. Navigate to Advanced -> High Availability page and to Set the Monitor Link parameter for the LAN to No, and then click Save Changes.
  3. Go to the Advanced > High Availability tab and add a password in the Cluster Shared Secret field, and then click Save Changes. Both units in the cluster must have the same shared secret password to communicate.
  4. In the Clustered Systems section, check the status of the Clustered System and verify that its status is Green.

Backup Unit

Ensure you can reach the WAN port of the primary unit from the backup unit before you add the backup unit to the cluster. Do this from the Ping Device option under the Advanced > Troubleshooting tab.

  1. Go to the Basic > IP Configuration tab, and fill-in the WAN IP Configuration section. In one arm reverse proxy mode the LAN IP is not configured.
  2. Navigate to “Advanced -> High Availability” page and to Set the Monitor Link parameter for the LAN to No, and then click Save Changes.
  3. Go to the “Advanced > High Availability” tab and add the same Cluster Shared Secret mentioned on the primary box; and then click Save Changes.
  4. In the Clustered Systems section, check the status of the Clustered System and verify that its status is Green.
  5. Ensure you can reach the WAN port of the primary unit from the backup unit. We can do this from the Advanced > Troubleshooting tab using “Ping Device” option.
  6. In the Clustered Systems section, enter the WAN IP address of the primary unit and click Join Cluster.

Note: After executing join cluster, secondary box will wipe out its configuration and try to fetch the configuration from the primary box.


Link to This Page:
https://campus.barracuda.com/solution/50160000000HYjjAAG