topic Shutdown Clustered/HA FWs in General Topics

Shutdown Clustered/HA FWs

GMasanz — Thu, 06 Sep 2018 16:30:19 GMT

Is there any documentation on how to properly shutdown a clustered/HA FW pair and then restore connectivinty power verifying proper function once power is restored?

Re: Shutdown Clustered/HA FWs

reaper — Fri, 07 Sep 2018 08:38:00 GMT

hi @GMasanz

As this is a very uncommon thing to do, there is no article that directly describes this exact procedure

To shut down an appliance you can run '> request shutdown system' from the CLI which will bring down the system in a nice way

To bring a cluster back, it would probably most closely resemble restoring a cluster during an upgrade process, which is described here : https://live.paloaltonetworks.com/t5/Featured-Articles/Best-Practices-for-PAN-OS-Upgrade/ta-p/111045

eg. bring back one member, ensure it is functional, then return the second member

Re: Shutdown Clustered/HA FWs

Tonydotigr — Fri, 07 Sep 2018 12:57:00 GMT

I'm not sure that shutting down a cluster and power backing up is an uncommon thing to do.

I don't see anything in the link that related to shutdown.

If they are powered down via CLI or GUI will they power back up in cluster after power cord is reinserted?

Re: Shutdown Clustered/HA FWs

BPry — Fri, 07 Sep 2018 16:15:22 GMT

@Tonydotigr,

It's uncommon in the sence that you would seldomly shutdown a firewall on purpose in a planned manner. Most people will only ever restart the box during system upgrades and would seldom issue a shutdown command.

Once the system is shutdown, the only way you could restore it is by unplugging the power and reinserting it, there's a nice warning about this when you actually attempt to shut this down. At that point the device will act the same as it does when you restart it.