topic IPS Running Active/Active after reboot. in General Topics

IPS Running Active/Active after reboot.

Gareth.Doyle — Mon, 14 Oct 2019 20:11:42 GMT

I upgraded a few pair of IPS/IDS devices last night and ran into an odd issue I haven't seen when upgrading other devices before. They run, typically, in Active/Passive mode, so when I upgrade I suspend one, upgrade, reboot, unsuspend it, and then repeat the process on the other device.

Last night after I walked through this process the devices came active and stayed active, despite them both being up. I have had to suspend one of these IPS/IDS devices in several locations to ensure only one is active.

Does anyone know why this happened and what the resolution may be?

Thanks.

Re: IPS Running Active/Active after reboot.

BPry — Mon, 14 Oct 2019 21:16:23 GMT

@Gareth.Doyle,

Sounds like your devices went into split-brain and aren't able to see each others status, so they'll both actively be active assuming the other device is offline. I would look at you HA stats and ensure that the devices are properly communicating with eachother.

Re: IPS Running Active/Active after reboot.

Gareth.Doyle — Tue, 22 Oct 2019 18:07:16 GMT

Yes, what I have learned is that after a major upgrade the HA keys are no longer referenced accordingly and must be manually exported and imported to restore this connectivity.