There are some prerequisites to be aware of before setting up High Availability (HA):

  • When configuring a HA pair - both units must be the same model, have the same firmware version, and have the same license type.
  • Ensure to Set the Partner Shared Secret.
  • Latency on the link between the two MOVEit WAF units must be below 100 milliseconds.
  • Ensure that any switches have Internet Group Management Protocol (IGMP) snooping disabled.
  • Ensure that any switches have Portfast enabled.
  • Multiprotocol Label Switching (MPLS) networks are not supported in a HA setup.
  • Snapshoting or backing up of the virtual machine is not supported.
  • Hyper-V

    • Ensure that any switches do not prevent MAC spoofing. For example, on Hyper-V, go to the network adapter settings in the Virtual Machine settings and select the Enable MAC address spoofing check box.

      Issue with Hyper-V and HA on a Pair of MOVEit WAF units

      If you are having problems with Hyper-V and HA on a pair of MOVEit WAF units, you may need to configure MAC address spoofing. The following Microsoft TechNet article may help you to fix the problem: Configure MAC Address Spoofing for Virtual Network Adapters.

  • VMware

    • Ensure that MAC address changes and Forged transmits are both set to Accept. Ensure this is forced (hard coded) on the port group because any changes to the vSwitch will affect all port groups by default.

    • When using HA and the MOVEit WAF units are on different hosts: To prevent the transmission of RARP packets from being sent every time a Virtual Machine is powered on, set the Notify Switches option to No.