How to use High Availability?
Support Model : Vigor2952 SeriesVigor3220 SeriesVigor2925 SeriesVigor2860 SeriesVigor2862 Series
High Availability provides hardware redundancy to the LAN clients. DrayTek Router has two modes for High Availability feature: Hot-Standby and Active-Standby.
In Hot-Standby Mode, Primary and Secondary router share the same WAN source. Usually, only the Primary is online. When Primary goes down, Secondary comes up and use the same WAN line to dial up, and continue to provide Internet service to LAN clients.
Active-Standby mode is almost same as Hot-Standby mode, only that in the Active-Standby mode, the Primary and Secondary connect to the different WAN sources; also, the Secondary will always be online.
This document describes how to set up High Availability between Vigor Routers.
(For more information about these two modes, please refer to What is High Availability?)
(This setup applies to Vigor2860, Vigor2925, Vigor2952 and Vigor3220 series, for Vigor3900 and Vigor2960, please refer to the article here.)
1. On the primary router, choose Redundancy Method you would like to use, then set the following configurations:
- Group ID is used to identify who are the group members, enter the same ID on all the members. The default value is 1, we may leave it as default here.
- Priority ID is used to decide which router should be the primary one, and 30 is the highest. If 2 or more routers are having the same Priority ID, their LAN IP addresses (for management Interface) will be considered, e.g., 192.168.1.2 has higher priority than 192.168.1.3…, etc.
- Authentication Key: enter the same authentication key on all the members.
- Management Interface: the packets for communication (including deciding the primary, configuration sync, and some maintenance…,etc) between members will be sent in the management interface, in other word, clients in other LAN subnet won't be able to see these packets. In order to have best communication and for security purpose, we recommend to choose an interface that is less possible to have interruption for the communication (loop/broadcast storm from other LAN clients…). In our scenario, we reserve LAN 1 for High Availability only, and put all other LAN clients in LAN2~LAN5.
- Update DDNS: for dynamic WAN IP users, enable this function so once the secondary router becomes primary and dials up the WAN, it will also update its new WAN IP address to the same DDNS profile, so your network will be accessible with the same DDNS domain.
- Syslog: enable to show all the High Availability related logs in syslog.
- Enable the LAN Subnet to join High Availability. Any existing LAN without joining High Availability will not be served with hardware redundancy.
Virtual IP: name the virtual IP here, please note that the virtual IP can NOT be the same with any member LAN IP.
2. Enable Configuration Sync and set the Sync Interval. Default is every 15 minutes.
3. Configure High Availability on the secondary router. Mind that the Priority should be lower than the primary router. Besides priority, all other settings should be the same.
4. Configuring LAN on the primary router.
- Set up the LAN IP address, it has to be different from the Virtual IP and the LAN IP of secondary router. Again, for any routers with the same Priority ID, their IP addresses will be compared, so we suggest to use a IP with lower number on the Primary one.
- Gateway IP is the same with LAN IP, and the note in parentheses indicates that the gateway IP provided to LAN clients will be replaced by the Virtual IP.
5. Configure LAN on the secondary router. Mind that the IP should be different and larger than it on the primary router.
Note: If you have more than one LAN, you should set all the LAN IP of each LAN on Primary and Secondary routers to different IP addresses to avoid IP conflict. Here is the example, there are several LAN and all of them are under the protection of hardware redundancy:
6. We have setup High Availability on both routers, and before we link up both routers, it's time to setup all other functions on the primary router so later we can see the configuration sync taking place. If your primary router is already settled please proceed to the next step. Here we configure the WAN as the representative example.
Then confirm the WAN setup by seeing WAN online.
7. After all the functions are set properly on the primary router, we link up the management interface LAN so both routers can start detecting each other, deciding which one should be the primary and syncing the configuration. Since the routers will communicate via the Management Interface, it's required to use the ports that belong to the Management Interface LAN (LAN1 in this scenario). We can check for this information in LAN >> VLAN. In this scenario we can use the port 5 on both routers, so we use an Ethernet cable to wire up LAN port 5 on both routers.
8. We may check the High Availability status by visiting the Status page:
For the first time the two routers link up, we can see they are syncing the configuration from the primary to the secondary (showing "Progressing" on the secondary router):
Note: The "Cached Time" indicates the time that router has got the information from the other router ago. Click "Renew" to update the information of remote router, click "Refresh" to update the information of local router.
When a sync is finished or the routers are already having the same configuration, it will show the "Equal" result:
Note: Router will check if there's any un-synced modification when it reaches the time interval we set in step 2. We may force to sync by clicking the "Sync" button. The secondary router will reboot after the config sync.
9. Now we may inspect if the secondary router received the configuration from the primary router. In this scenario we check the secondary router online status:
Before syncing we didn't configure the WAN, now seeing WAN1 and WAN2 having "Static IP" indicates it did receive the corresponding configurations. And the "Disconnected-HA" means this router is not dialing up the WAN due to the primary router in the High Availability group is working, so as a secondary router it doesn't need to be online now. You may also check other configurations on your secondary router.
10. We may also check the Details page:
Sharing the WCF License
11. Now the routers are set, if you have WCF license, you may create a group on MyVigor so these routers can share the same license.
a. First, login to myvigor.draytek.com, find High Availability Settings on left hand side and click Add New
b. Give a Group Name, select the same HA Group ID as router setting, and select the member routers in the HA Device drop-down menu:
Note: The drop-down menu only lists out the devices that are registered under this MyVigor account. If you don't find the router you are using, please find out which account this device is registered under.
c. Save the profile, and we can see the group entry:
Send the Notification to Network Administrator
We can set Vigor Router to notify the network administrator by sending email or SMS when the following events occur:
1. Failover Occurred: the WAN of the primary router goes down and the secondary router takes over,
2. Configuration Sync Fail: the configuration sync between primary and secondary router fails,
3. Router Unstable: one of the routers becomes unstable.
Please refer to these application notes, and choose the "High Availability" when setting the Notification Object: