topic HA Passive Link State - Change in General Topics

HA Passive Link State - Change

ArnaldoMorales — Thu, 10 Nov 2022 06:24:39 GMT

We want to modify the HA Passive Link from shutdown to auto on production firewalls. I suppose it is a pretty straighforward change, but I would to confirm if there is something which we should keep in mind. Something like applying first in the passive firewall and commit, and then on the active firewall and commit. Or if it is only necessary to apply the change on the Active firewall and the configuration will be replicated to the Passive one automatically (I have not way to test this on lab at this moment). Thanks.

Re: HA Passive Link State - Change

PavelK — Thu, 10 Nov 2022 07:14:46 GMT

Hello @ArnaldoMorales

the HA configuration is not synchronized from active to passive Firewall. I have done this change in the past in production Firewalls. It is safe to change it on active firewall and commit, then perform the change on passive Firewall and commit.

Kind Regards

Pavel

Re: HA Passive Link State - Change

ArnaldoMorales — Thu, 10 Nov 2022 07:53:47 GMT

Thanks!

Re: HA Passive Link State - Change

kiwi — Thu, 10 Nov 2022 12:22:04 GMT

Hi @ArnaldoMorales ,

As @PavelK mentioned the HA setting will not be synced in HA. Additionally, please check out the following DOC which details all the settings that don't sync in HA (notice that HA settings is part of the list):

What Settings Don’t Sync in Active/Passive HA?

Kind regards,

-Kiwi.