It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Application Firewall

How do I remove / replace units in a clustered Barracuda Web Application Firewall?

  • Type: Knowledgebase
  • Date changed: one year ago

Solution #00003949

Scope:
Barracuda Web Application Firewalls, Models 360, 460 and 660, all firmware versions.


Answer:

You can remove a Barracuda Web Application Firewall from a cluster at any time. When removing units from a cluster ensure that the unit being removed does not assume ownership of the interfaces or services as this can cause IP conflicts and may cause services to go down.


Removing the Backup Unit from the Cluster


  1. Perform a backup of the system configuration on both the Primary and Backup unit.
  2. Ensure that the primary unit is active and handling traffic.
  3. Login to the web interface of the Backup unit. From the Advanced > High Availability page, remove the cluster by clicking the delete button in the system list. Deleting the cluster clears the backup configuration from the database.
  4. Login to the web interface of the Primary unit. From the Advanced > High Availability remove the cluster by clicking the delete button in the systems list. Deleting the Primary unit from the cluster removes the peer information from database but retains the units? configuration information.


When you replace a unit for RMA purposes or otherwise, you must remove it from the cluster. The unit must be removed because its serial number is used to communicate between the two units in the cluster. The replacement unit has to be added through the clustering process.


Replacing the Primary Unit with a New Unit (Requires downtime)


  1. Perform a backup of the system configuration on the backup unit.
  2. Ensure that the backup unit is active and handling traffic.
  3. Configure a new unit with the primary units WAN IP address from the new units? BASIC > IP Configuration page.
  4. Make sure that the new device is on same firmware version as the other device.
  5. From the Advanced > High Availability page of the Backup unit remove the cluster by clicking the delete button in the system list. (This will clear the configuration of that box).
  6. Clear the configuration on the backup unit. This is required to ensure the services are stopped.
  7. Restore the backup taken from Backup unit to the new unit. When the restore is complete the primary unit will assume the services. Make sure all services are working fine.
  8. From the Advanced > High Availability page of the old backup unit enter the WAN IP address of the new primary unit and click Join Cluster.
  9. Now the old box will pull the configuration from the new active device.


Replacing the Primary unit with a New unit and making the Backup Unit the Primary Unit and New unit the Backup Unit (Requires downtime)


  1. Perform a backup of the system configuration on the backup unit.
  2. Ensure that the backup unit is active and handling traffic.
  3. Make sure that the new device is on same firmware version as the other device.
  4. From the Advanced > High Availability page of the Backup Unit remove the cluster by clicking the delete button in the system list. (Doing this will clear the configuration of secondary box) 
  5. Clear the configuration on the backup unit. This is required to ensure the services are stopped.
  6. Load the backup taken to the same device. Now the box will come up as a standalone device with no cluster configuration.
  7. Configure the new unit with the old primary units WAN IP address from the new units BASIC > IP Configuration page.
  8. Make sure that the new box is on same firmware as the other device.
  9. From the Advanced > High Availability page of the new unit enter the WAN IP address of the Backup Unit and click Join Cluster.
  10. Now the new unit will act as a Backup box and will pull the configuration from the active device.


Replacing the Backup Unit with a New Unit


  1. Ensure that the primary unit is active and handling traffic.
  2. Make sure that the new device is on same firmware version as the other device.
  3. From the Advanced > High Availability page of the primary unit remove the cluster by clicking the delete button in the system list.
  4. Configure the new unit with the old backup units WAN IP address from the new units BASIC > IP Configuration page.
  5. From the Advanced > High Availability page of the new backup unit enter the WAN IP address of the new backup unit and click Join Cluster.


Link to This Page:
https://campus.barracuda.com/solution/50160000000HZSUAA4