Contents

Related Topics

Configure a Replacement (RMA) FireCluster Member

If your Firebox hardware fails during the warranty period, WatchGuard might replace it with an RMA (Return Merchandise Agreement) unit of the same model. When you exchange a Firebox for an RMA replacement, WatchGuard Customer Care transfers the licenses from the original device serial number to the new device serial number. All the features that were licensed to the original device are transferred to the replacement device.

If you must replace a member of a FireCluster, use the steps in the subsequent sections to prepare the replacement Firebox and add it to the cluster.

Compare the Fireware OS Version and Build Number

Before you join the replacement Firebox to your cluster, compare the version of Fireware OS on the replacement device with the version installed on the current cluster master device. You can use WatchGuard System Manager to find the version of Fireware installed on each device.

To find the OS version and build number installed on the replacement device:

  1. Start the replacement Firebox. It does not have to be connected to the Internet.
  2. Use an Ethernet cable to connect your management computer to interface 1.
  3. In WatchGuard System Manager, connect to the device with the default device settings:
    • IP Address — 10.0.1.1
    • User Name — status
    • Passphrase — readonly
  4. After you connect to the device, adjacent to the device model number, find the OS version and build number.

To find the OS version and build number installed on the cluster master:

  1. In WatchGuard System Manager, connect to the cluster master.
  2. Expand the cluster and the cluster master details.
  3. In the cluster member details, find the OS version and build number.

If the OS version and build numbers are not the same, you must upgrade the replacement device to the same version of Fireware OS that is installed on the cluster master.

Get the Feature Key for the Replacement Firebox

Because your replacement Firebox has a different serial number, you must get a new feature key for it from your account on the WatchGuard website. You must have the device feature key to upgrade software on the device (if necessary), and to add the replacement device to the FireCluster configuration. On the WatchGuard website, the replacement device is in your activated products list with the same Friendly Name as the original device, but with the serial number of the replacement device.

To get the feature key for your device:

  1. Log in to your account on the WatchGuard website.
  2. In the Support section of the website, select My Products.
  3. From your list of activated products, select the replacement device. It has the same Friendly Name as the original device it replaces.
    The Product Details page for the replacement device appears.
  4. Click Get my feature key.
  5. Copy the feature key text to a local file.

Upgrade Fireware OS on the Replacement Firebox

If you must upgrade Fireware OS on the replacement device to the version of Fireware OS installed on the cluster master, you must first run the Quick Setup Wizard to set up a basic configuration on the device and add a feature key. A feature key is required to upgrade the software.

If the version of Fireware OS on the replacement Firebox is the same as the version installed on the cluster master, you do not have to compete the steps in this section.

To run the Quick Setup Wizard:

  1. Power on the replacement Firebox. It does not have to be connected to the Internet for this procedure.
  2. Use an Ethernet cable to connect your management computer to interface 1.
  3. In WatchGuard System Manager, select Tools > Quick Setup Wizard.
    The Quick Setup Wizard starts.
  4. Complete the Quick Setup Wizard:
    1. Use the default IP address for the trusted interface.
    2. Configure the external interface to use DHCP.
    3. For the feature key, copy the text of the feature key from the file you saved and paste the text in the wizard.

To upgrade Fireware OS on the replacement Firebox:

  1. To make sure the correct Fireware OS version and build number is installed on your management computer, in WatchGuard System Manager, select Help > About WatchGuard.
    The list of installed Fireware OS appliance software appears.
  2. In WatchGuard System Manager, connect to the replacement device with the interface IP address and status passphrase you specified in the Quick Setup Wizard.
  3. Select Tools > Policy Manager.
    Policy Manager appears.
  4. Select File > Upgrade.
  5. Type the configuration passphrase you set in the Quick Setup Wizard.
  6. Browse to select the upgrade image file that is the same version as the version installed on the cluster master.

Update the FireCluster Configuration

After you have the feature key for the replacement device, you must remove the feature key for the old device from the FireCluster configuration and replace it with the new feature key.

  1. In WatchGuard System manager, connect to the FireCluster and start Policy Manager.
  2. Select FireCluster > Configure.
  3. Select the Members tab.
  4. Select the cluster member you replaced, and click Edit.
  5. Select the Feature Key tab.
  6. To remove the feature key for the old device, click Remove .
  7. Click Import.
    The Import Firebox Feature Key dialog box appears.
  8. Paste the feature key text into the Import Feature Key dialog box.
  9. Save the configuration to the cluster.

Connect and Discover the Replacement Firebox

To replace a cluster member with the replacement Firebox:

  1. Power off the replacement device.
  2. Disconnect the cables from the Firebox to replace, and connect them to the replacement device. Make sure you connect each cable to the same numbered interface on the new Firebox as it was connected to on the old Firebox.Be

Before the cluster master can discover the replacement Firebox, you must reset the new Firebox to factory-default settings. This resets the configuration settings and removes the feature key, but does not change the installed version of Fireware OS. You can then use Fireware System Manager to start discovery of the replacement Firebox.

  1. Start the replacement Firebox with factory-default settings.
    For information about how to reset your Firebox, see Reset a Firebox.
  2. Start Firebox System Manager for the cluster master.
  3. To manually start discovery of the second cluster member, select Tools > Cluster > Discover Member .
    For more information, see Discover a Cluster Member.
  4. On the Front Panel tab, expand the cluster to see the status of both cluster members.
    For more information, see Monitor and Control FireCluster Members.

Give Us Feedback     Get Support     All Product Documentation     Technical Search