We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Application Firewall

How do I remove / replace units in a clustered Barracuda Web Application Firewall?

  • Type: Knowledgebase
  • Date changed: 6 months ago
Scope:
Barracuda Web Application Firewalls, all Models and all firmware versions.

Answer:

You can remove a Barracuda Web Application Firewall from a cluster at any time. When removing units from a cluster ensure that the unit being removed does not assume ownership of the interfaces or services as this can cause IP conflicts and services to go down.

Removing the Backup Unit from the Cluster:

Perform a backup of the system configuration on both the Primary and Backup unit.
Ensure that the primary unit is active and handling traffic.
Login to the web interface of the Backup unit. From the ADVANCED > High Availability page, remove the cluster by clicking the delete button in the system list.
Deleting the cluster will clear the configuration from the backup device.
Login to the web interface of the Primary unit. From the ADVANCED > High Availability, remove the cluster by clicking the delete button in the systems list.
Deleting the Primary unit from the cluster removes the peer information from the database but retains its configuration.


When you replace a unit, for RMA purposes or otherwise, you must remove it from the cluster. The unit must be removed because its serial number is used to communicate between the two units in the cluster. The replacement unit has to be added through the clustering process.

** This task should be carried out during a planned maintenance window **


Making the Backup Unit into the Primary Unit: (This process requires down time)

Perform a backup of the system configuration on the backup unit.
Ensure that the backup unit is active and handling traffic.
From the ADVANCED > High Availability page of the Backup Unit, remove the cluster by clicking the delete button in the system list.
This process will delete all the configuration on the backup device and services will be DOWN during this time.
Load the latest backup to the backup device and make sure that the device status is showing as 'standalone' and all services are working fine through the device
From the ADVANCED > High Availability page of the new device, enter the WAN IP address of the peer device, and click Join Cluster.

Replacing the Primary Unit with a New Unit: (This process requires down time)

Perform a backup of the system configuration on the backup unit.
Ensure that the backup unit is active and handling traffic.
Configure a new unit with the primary unit?s WAN IP address from the new units? BASIC > IP Configuration page.
From the ADVANCED > High Availability page of the Backup Unit, remove the cluster by clicking the delete button in the system list.
This process will delete all the configuration on the backup: Active device
Load the latest backup to the new device and make sure that all services are working fine from the new device
From the ADVANCED > High Availability page of the new box, enter the WAN IP address of the backup box and click Join Cluster.


Replacing the Backup Unit with a New Unit:

Ensure that the primary unit is active and handling traffic.
From the ADVANCED > High Availability page of the primary unit, remove the cluster by clicking the delete button in the system list.
Configure the new unit with the old backup unit?s WAN IP address from the new units? BASIC > IP Configuration page.
From the ADVANCED > High Availability page of the new backup unit, enter the WAN IP address of the primary unit, and click Join Cluster.

Link to this Page:
https://campus.barracuda.com/solution/50160000000ItCCAA0