Nominated Discussion: How to Replace a FW in an A/P Cluster

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Content translations are temporarily unavailable due to site maintenance. We apologize for any inconvenience. Visit our blog to learn more.

Community Team Member
No ratings

This Nominated Discussion Article is based on the post "Adding a firewall back into a AP cluster that has outdated network and device settings" by @AlanDeBoer   and responded to by @Raido_Rattameister. Read on to see the solution!

 

Hi All,

 

I'm curious if anyone can provide an article or just some basic steps of adding a firewall back into a AP cluster that has "outdated" network and device settings.

 

Firewall-02 was moved to a new location and has a new IP scheme for the network and device settings.

Firewall-01 will be physically moved and needs to rejoin the cluster, but it does have outdated IP settings.

 

I'm assuming the first step is to power up 01 without any copper/fiber connected and console into 01 and update the device management IP first.

Solution:

 

Step 1 - Take config backup from both firewalls (Device > Setup > Operations).

Step 2 - Make sure that "Device Priority" of Firewall-02 is lower than Firewall-01 to make sure Firewall-02 stays active firewall.

Step 3 - Cabling (at minimum HA1 cable).

Step 4 - Click "Sync to peer" in Firewall-02 (Dashboard > High Availability widget).

 

If you click "Sync to peer" on Firewall-01 you will push old nic scheme from Firewall-01 to Firewall-02 and your network will go down!

 

In addition, mgmt IP change as you pointed out.

Rate this article:
  • 1421 Views
  • 0 comments
  • 0 Likes
Register or Sign-in
Labels
Article Dashboard
Version history
Last Updated:
‎03-03-2023 01:04 PM
Updated by: