Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Nominated Discussion: How to Replace a FW in an A/P Cluster

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Community Team Member
No ratings

This Nominated Discussion Article is based on the post "Adding a firewall back into a AP cluster that has outdated network and device settings" by @AlanDeBoer   and responded to by @Raido_Rattameister. Read on to see the solution!

 

Hi All,

 

I'm curious if anyone can provide an article or just some basic steps of adding a firewall back into a AP cluster that has "outdated" network and device settings.

 

Firewall-02 was moved to a new location and has a new IP scheme for the network and device settings.

Firewall-01 will be physically moved and needs to rejoin the cluster, but it does have outdated IP settings.

 

I'm assuming the first step is to power up 01 without any copper/fiber connected and console into 01 and update the device management IP first.

Solution:

 

Step 1 - Take config backup from both firewalls (Device > Setup > Operations).

Step 2 - Make sure that "Device Priority" of Firewall-02 is lower than Firewall-01 to make sure Firewall-02 stays active firewall.

Step 3 - Cabling (at minimum HA1 cable).

Step 4 - Click "Sync to peer" in Firewall-02 (Dashboard > High Availability widget).

 

If you click "Sync to peer" on Firewall-01 you will push old nic scheme from Firewall-01 to Firewall-02 and your network will go down!

 

In addition, mgmt IP change as you pointed out.

Rate this article:
  • 1372 Views
  • 0 comments
  • 0 Likes
Register or Sign-in
Labels
Article Dashboard
Version history
Last Updated:
‎03-03-2023 01:04 PM
Updated by: