• SonicOS 7.1
• About SonicOS
  • Working with SonicOS
  • SonicOS Workflow
  • How to Use the SonicOS Administration Guides
  • Guide Conventions
• High Availability
  • About High Availability
    • High Availability Terminology
    • High Availability Modes
    • High Availability Encryption
    • Crash Detection
    • Virtual MAC Address
    • Dynamic WAN Interfaces with PPPoE HA
    • Stateful Synchronization with DHCP
    • Stateful Synchronization with DNS Proxy
    • About HA Monitoring
  • Understanding High Availability
    • Understanding SonicWall High Availability Operation Modes
    • About Active/Standby HA
  • Benefits of Active/Standby HA
    • Working of Active/Standby HA
    • About Stateful Synchronization
    • Benefits of Stateful Synchronization
  • How Does Stateful Synchronization Work?
    • Example of Stateful Synchronization
    • Active/Standby Prerequisites
  • Supported Platforms and Licensing for HA
    • Physically Connecting Your Security Appliances
    • Maintenance
      • Removing an HA Association
      • Replacing a SonicWall Security Appliance
• Replacing an HA Primary Unit
  • Replacing an HA Secondary Unit
    • High Availability Status
    • Active/Standby High Availability Status
    • High Availability Status
• High Availability Config
  • High Availability Licenses
  • Configuring High Availability
• Configuration of HA Active/Standby
  • Configuring Active/Standby High Availability Settings
    • Configuring HA with Dynamic WAN Interfaces
    • Configuring Network DHCP and Interface Settings
    • Disabling the SonicOS DHCP Server
    • Configuring Virtual IP Addresses
    • Configuring Redundant Ports
    • Fine Tuning High Availability
    • Advanced Settings
    • Configuring Advanced High Availability Settings
    • Monitoring High Availability
    • Configuring Active/Standby High Availability Monitoring
• IPv6 High Availability Monitoring
  • IPv6 HA Monitoring Considerations
  • SonicWall Support
• About This Document
  • Configuring Active/Standby High Availability Monitoring
  • IPv6 High Availability Monitoring
  • IPv6 HA Monitoring Considerations
• Azure Use Cases
  • Use Case 1: Manage Azure HA Firewall
  • Use Case 2: Forward LAN traffic to the External Network through the Gateway after HA Failover
  • Use Case 3: Configure DNAT on Azure HA Firewall
  • Use Case 4: Configure DNAT on Azure HA Firewall (Need to move multiple floating IPs support)
• SonicWall Support
  • About This Document

Role Assignment

As the next step, you will add Role Assignment to the Resource Group.

The role assignment “Contributor” should be set to the Resource Group since it will allow the firewalls to exchange High Availability information. To do that, follow the steps below:

1. Navigate to the Dashboard. On the search bar, search for the Resource Group you created during deployment. On the left panel, select Access Control (IAM).

2. Click Add > Add role assignment.

   

3. Click Contributor.

   

4. In Contributor, select Managed Identity, check if you are in the right subscription, and drop Managed Identity. Select Virtual Machine and select HA1 and H2 VMs to provide permissions (if it is already configured through the template, please leave it as the default).

   

   It is recommended that VNet and NSv Virtual Machines be in the same Resource Group. If they are in separate Resource Groups, NSv Virtual Machines must also be added as Contributors to the VNet Resource Group.