My first OS maintenance update

[mikejeezy]

Hi, I have an HA active/passive pair of 3050's that are currently on OS 5.0.2.  I have successfully downloaded and installed 5.0.9 on the passive unit.

1. Do I need to suspend the active/primary unit before I install the update or will the installation automatically take care of that?
2. I am a bit nervous because I am connected over VPN to the firewall I will be suspending.  Will my connection fail over?  Is there a way to make the management interface available without VPN just in case?

Thank you

(I may have posted this twice. If so, sorry. My original post did not show up in KnowledgePoint.)

[panos · Accepted solution]

Hi,

No you don't need to suspend.You can use preemptive function if you are anxious about 2nd device.

Give lower priority to the Active device for now.Choose preemptive for both,

after you installed 5.0.9 to the 1st device, failover will happen.Then after boot with 5.0.9 of the 1st device and sometime(1min) , it will takeover the Active membership to itself.

[mikejeezy]

Is it safe to update Active device over VPN connection?  At worst I will just have to reconnect - correct?  Thank you

[panos]

it will be better upgrading at a moment when someone can access physically to the device.