11-09-2022 10:24 PM
We want to modify the HA Passive Link from shutdown to auto on production firewalls. I suppose it is a pretty straighforward change, but I would to confirm if there is something which we should keep in mind. Something like applying first in the passive firewall and commit, and then on the active firewall and commit. Or if it is only necessary to apply the change on the Active firewall and the configuration will be replicated to the Passive one automatically (I have not way to test this on lab at this moment). Thanks.
11-09-2022 11:14 PM
Hello @ArnaldoMorales
the HA configuration is not synchronized from active to passive Firewall. I have done this change in the past in production Firewalls. It is safe to change it on active firewall and commit, then perform the change on passive Firewall and commit.
Kind Regards
Pavel
11-09-2022 11:14 PM
Hello @ArnaldoMorales
the HA configuration is not synchronized from active to passive Firewall. I have done this change in the past in production Firewalls. It is safe to change it on active firewall and commit, then perform the change on passive Firewall and commit.
Kind Regards
Pavel
11-10-2022 04:22 AM
Hi @ArnaldoMorales ,
As @PavelK mentioned the HA setting will not be synced in HA. Additionally, please check out the following DOC which details all the settings that don't sync in HA (notice that HA settings is part of the list):
What Settings Don’t Sync in Active/Passive HA?
Kind regards,
-Kiwi.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
