Activate ECMP without trafic disruption

[RomainSalmon]

Hello,

I wouldlike to enable ECMP on one HA pair. I read that the process will restart and can lead to trafic disuptions.

I was wondering if i could do the following in order to avoid disruptions : 

• Disable config sync.
• Doing the modification on my passive firewall. Wait that the process restart etc.
• Force HA failover on the standby member with ECMP enabled.
• Doing the modification on my passive (usually active )firewall. Wait that the process restart etc.
• Enable config sync again and force failover.

Because it's the network config, i m not sure i can commit that within a HA pair..

Best regards,

[TomYoung]

Hi @RomainSalmon ,

That sounds really good!  I don't see why you couldn't "commit that within an HA pair."  I wonder if these steps would be a little quicker?

• Disable config sync on the standby.  Commit.
• Make the change on the standby NGFW. Commit.  Wait that the process restart etc.
• Force HA failover to the ECMP standby.
• Enable config sync on the same NGFW (now active).  Commit.
• If the config doesn't automaticlly sync, do it from the dashboard.

That's a cool idea.  Please let us know how it goes.

Thanks,

Tom