topic Re: HA Sync with different Configuration in General Topics

HA Sync with different Configuration

theonewhoknocks — Wed, 14 Feb 2018 08:25:55 GMT

I have two firewalls previously on HA (Active-Passive mode). We had to shutdown the passive device due to some troubleshooting. Then we had to roll-back the config of the active PA.

Here's the current setup. (HA links not yet cabled)

Active PA - lower config version (e.g. version 207)

Backup PA - higher config version (e.g. version 210)

If I connect the HA links, will the backup PA sync to the active PA config version 207? Or will the active PA sync to the backup PA with config version 210?

Re: HA Sync with different Configuration

Mick_Ball — Wed, 14 Feb 2018 08:51:12 GMT

it's my understanding, and somebody please update if incorrect, that when you connect the HA link the devices will not sync.

you will have the option in the HA widget to sync to peer..... this can be done from either device....

Re: HA Sync with different Configuration

reaper — Wed, 14 Feb 2018 10:46:32 GMT

a config sync is only triggered when a commit is pushed or a manual sync is initiated, so no need to worry when you hook the passive back up to the HA

! make sure to keep it suspended until the 'state' sync has completed so it is aware there already is an active member and it doesn't try to become active by itself, easiest way to spot that is to see if it is populating HA information on the GUI dashboard

Re: HA Sync with different Configuration

theonewhoknocks — Mon, 05 Mar 2018 09:19:43 GMT

Hi Mickball, you are correct. Thanks!