Question regarding VM series HA after a hardware failure

Reply
Highlighted
L1 Bithead

Question regarding VM series HA after a hardware failure

I am new to VM series PAs and looking into how to setup HA.  So it is interesting that the license is attached to the host and VM file location.  Any change in this needs a re-registration of the license via tech support.  Even using VMotion would trigger a need for a support call.  I then assumed that I could put one VM on a separate Hypervisor in case of a hardware failure, but then while setting up HA, I checked a help screen that stated a requirement for HA is that both VMs are on the same Hypervisor.  So, it sounds like this configuration is vulnerable to a hardware failure on the host, which doesn't sound like good HA to me.  How is this mitigated, or am I missing something?

 

Thanks,

 

ccfalkner 

Tags (2)

Accepted Solutions
Highlighted
L7 Applicator

I v-motion my VM-Series firewalls all the time and haven't ever had to contact support for licensing issues.  

 

They are configured in an Active-Passive HA Pair and are almost always located on different hosts to protect against hardware failure.

 

"Same Hypervisor" configuration recommendation for High Availability probably means that they both need to be running on ESXi, not one on ESXi and another on Hyper-V (or KVM, or Citrix Netscaler, etc.)  

View solution in original post

Highlighted
L1 Bithead

That is good to hear.  I specifically asked about VMotion in a support call and received the information I stated.  I am glad that it is wrong.  It was too simple of a problem to exist.

 

Thanks.

View solution in original post


All Replies
Highlighted
L7 Applicator

I v-motion my VM-Series firewalls all the time and haven't ever had to contact support for licensing issues.  

 

They are configured in an Active-Passive HA Pair and are almost always located on different hosts to protect against hardware failure.

 

"Same Hypervisor" configuration recommendation for High Availability probably means that they both need to be running on ESXi, not one on ESXi and another on Hyper-V (or KVM, or Citrix Netscaler, etc.)  

View solution in original post

Highlighted
L1 Bithead

That is good to hear.  I specifically asked about VMotion in a support call and received the information I stated.  I am glad that it is wrong.  It was too simple of a problem to exist.

 

Thanks.

View solution in original post

Highlighted
L7 Applicator

Administrative operations that change the VM's UUID (clone, backup/restore, etc.) could invalidate the license, requiring you to contact support.  For these types of events, VMware usually asks the administrator if the VM was "moved" or "copied".   In these scenarios, the right answer is "moved".  

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!