topic Split-Brain Enable HA Config Change in General Topics

Split-Brain Enable HA Config Change

RickSnell — Thu, 28 Jun 2018 14:13:44 GMT

We are setup as active/passive and have intentionally caused a split-brain with our firewalls (5050's) by removing one from vwire mode and removing all cables except mgmt port to perform some migration activities. We left the "Enable HA" checked on both the primary and secondary.

Question: We want to uncheck the "Enable HA" (primary first with a commit, then secondary) but want to verify that traffic will not be impacted when we perform this action (cause a reboot or make the primary unstable for some reason).

Re: Split-Brain Enable HA Config Change

OtakarKlier — Thu, 28 Jun 2018 14:33:10 GMT

Hello,

While it wont reboot, you will essentailly ahve two stand alone firewalls and back into a 'split-brain' since both would be 'active'. Another option might be to use the 'Suspend local device'. Its under Device -> High Availability ->Operational commands. This will ensure that the secondary will not take over any functions until its enabled again.

Regards,