![](https://pdfstore-manualsonline.prod.a.ki/pdfasset/d/35/d359b2c8-c743-46c6-88a2-041f422b0152/d359b2c8-c743-46c6-88a2-041f422b0152-bg479.png)
High Availability
1145
SonicOS 5.8.1 Administrator Guide
Perform the following steps:
Step 1 Decide which interface to use for the additional connection between the appliances. The same
interface must be selected on each appliance. For example, you could connect X4 on the
Primary unit to X4 on the Backup, in which case X4 would be the HA Data Interface.
Step 2 In the SonicOS Enhanced management interface, navigate to the Network > Interfaces page
and ensure that the Zone is Unassigned for the intended HA Data Interface.
Step 3 Using a standard Ethernet cable, connect the two interfaces directly to each other.
Associating Appliances on MySonicWALL for High Availability
This section describes how to associate two SonicWALL appliances as a High Availability Pair
on mysonicwall.com, and shows an example high availability configuration on SonicOS
Enhanced.
• “Configuration Overview” on page 1145
• “Configuration Procedures on MySonicWALL” on page 1146
Configuration Overview
You can associate two SonicWALL security appliances as HA Primary and HA Secondary on
MySonicWALL. Note that the Backup appliance of your High Availability Pair is referred to as
the HA Secondary unit on MySonicWALL. After the appliances are associated as an HA Pair,
they can share licenses.
You need only purchase a single set of licenses for the HA Primary appliance. The licenses are
shared with the Backup unit. This includes the SonicOS Enhanced license, the Support
subscription, and the security services licenses. The only licenses that are not shareable are
for consulting services, such as the SonicWALL GMS Preventive Maintenance Service.
It is not required that the Primary and Backup appliances have the same security services
enabled. The security services settings will be automatically updated as part of the initial
synchronization of settings. License synchronization is used so that the Backup appliance can
maintain the same level of network protection provided before the failover.