Anybus Defender High Availability Mode

12 Jan 2026

This guide is relevant to configure 2 Anybus Defender in High Availability real-time failover mode .

 

APPLICABLE PRODUCTS 

Anybus Defender 6000 and 8000 series with PRO licenses

 

PRE-REQUISITES

An ethernet cable must connect both devices directly to support sharing the state-table in real-time. 

 

VERSIONS USED IN THIS ARTICLE

  • Anybus Defender 2.5.2-2025111723

SETUP

 

RESTRICTIONS

The 2 units will work in ACTIVE - STANDBY mode where one unit is MASTER and the other units will be a BACKUP. Configuration is synced from the MASTER node to the BACKUP node automatically, however when MASTER is down, changes done in BACKUP - even while ACTIVE - will not be propagated back to the MASTER unit when it returns online. 

 

Anybus Defender HA Configuration

 

Step 1 – Create Synchronization link

  1. Login to the Anybus Defender.

Create Users (Both Master and Backup)

  1. Navigate to System -> User manager
  2. Create a new user
  3. Set scope to Local
  4. Username “HA_USER”
  5. Use a unique password

Interface (Both Master and Backup)

1. Navigate to “Interfaces” and choose an Interface for the HA, in this guide "igb3"

2. Enable interface

3. Change Description to HA_SYNC   

5. In IPv4mConfiguration Type select Static IPv4 and choose an IPv4 address to connect the two defenders, in this example "20.20.20.1/24"

Example:

 

Firewall WAN and LAN failover Virtual IPs (Both Master and Backup)

  1. Navigate to Firewall -> “Virtual IPs”
  2. Select Hot Standby
  3. Interface WAN
  4. Address type Single address and Address(es) to the WAN Subnet, in this example “10.10.10.122/24”
  5. Assign a Virtual IP Password

Navigate to Firewall -> “Virtual IPs” (LAN failover)

  1. Select Hot Standby
  2. Interface LAN
  3. Address type Single address and Address(es) to the LAN subnet, in this example “192.168.200.122/24"
  4. Assign a Virtual IP Password

 

Firewall Rules, communication and failover monitoring (Both Master and Backup)

Navigate to Firewall -> “Rules”

  1. Action should be Pass
  2. Interface is WAN and LAN
  3. Address Family applies to IPv4
  4. Protocol should be Hot Standby
  5. Specify source to be the “HA_SYNC net” and destination “HA_SYNC net”

 

Navigate to Firewall -> “Rules -> HA_SYNC”

  1. Action should be Pass
  2. Interface HA_SYNC
  3. Protocol “Hot Standby Sync”
  4. Source and Destination is “HA_SYNC net”

Navigate to Firewall -> “Rules”

  1. Action should be Pass
  2. Interface HA_SYNC
  3. Protocol “TCP”
  4. Source and Destination is “Any”



Navigate to Status -> “system” -> “High Avail. Manager”

  1. (Both) Set Hot Standby sync to be the IP you set on the other Defenders HA_SYNC interface, in this example 20.20.20.2
  2. (Both) Synchronize Interface: HA_SYNC
  3. (Master only) Synchronize Config to IP should be set to the opposite of MASTER (to BACKUP Anybus Defender)
  4. (Master Only) Remote System Username to user on Backup (Username+Password)
  5. (Master Only )Select the options you want to sync

Navigate to Status -> “High Avail. Sync”

Under Status – High Avail. Sync you will find the Hot Standby Interfaces along with their status, on the Master Defender it should say Master on both and on the Backup Defender it should say Backup on both.

 

If you get an error that says that the Hot Standby Protocol doesn’t exit.

You will need to download the Defenders configuration file under System – Backup & Restore and press “Download configuration as XML”, open the file in notepad and search for “<protocol>Hot Standby</protocol>” and change it to “<protocol>carp</protocol>” on both the WAN and LAN interfaces, and then under Restore Backup upload the file and press Restore Configuration. Do this on both Defenders.

 

 

© HMS Networks AB 2026