Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 6 replies
  • Answers 1 answer
  • Subscribers 6 subscribers
  • Views 4809 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

New RMA unit in HA pair

GreggB

We've just received an RMA replacement for a SG430 in a HA pair , everything I've read says just remove old unit , connect all interfaces and power on then HA will automatically resync both units etc.

Done that but new unit not being recognised /syncing and only showing eth0 as physically up , spoke to Sophos support who stipulate the new RMA unit needs HA configuring regardless ?

There is a difference in firmware , current unit 9.501 - RMA unit 9.610 , so guess we need to update current to match but do we then still need to configure new for HA or should it just re-sync as suggested ?

Any advise would be welcome.



This thread was automatically locked due to age.
Parents
  • 0

    Hi Gregg - your first post - welcome to the  UTM Community!

    Yes, you will want have the RMA unit at the same version as the current Master.  I assume you meant that your Master is at 9.510 and the RMA unit is at 9.601.  The least-disruptive would be to re-image the RMA unit.  The 9.510 ISO is available at UTM Support Downloads.

    If the RMA unit isn't immediately taken over and re-syncing started by the current Master, first check that High Availability is still activated on the current Master.  If so, then try a Factory Reset on the RMA unit.

    You definitely don't want to configure anything in WebAdmin on the RMA unit.

    Please share your results here.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hi Bob,

    thanks for answering , patched current master to 9.601 to match RMA unit and checked that HA was still activated and configured which it is then tried factory reset on RMA but still no sign of connectivity or syncing. Have changed cable used on the HA interfaces just in-case but no joy.

    Is it worth turning HA off / on at the master unit ?

    This is getting fairly critical now any other advice would be appreciated.

    thanks - Gregg

  • 0 in reply to GreggB

    Hi Gregg,

    what’s the status of HA in the webadmin? Is the replaced node marked as dead?

    Best regards

    Alex

    -

  • 0 in reply to Alexander Busch

    Hi Alex,

     

    bit the bullet and did as suggested by Sophos support , logged in to RMA unit and turned on HA ( was off by default ) and bingo now all synced and functional. Thought that this process was supposed to be automated and didnt require any config on replacement RMA unit but obviously did in this case , also noticed this on Sophos "UTM Disaster Recovery" document:

    1. On the auxiliary node to be added Eth3 should be already configured for Automatic Configuration. If not then you may want to do a factory reset and then follow the steps below:
      • Access the appliance, configure the HA operation mode for Automatic Configuration

    So dont know if something has changed in this respect ?

    thanks - Gregg

Reply
  • 0 in reply to Alexander Busch

    Hi Alex,

     

    bit the bullet and did as suggested by Sophos support , logged in to RMA unit and turned on HA ( was off by default ) and bingo now all synced and functional. Thought that this process was supposed to be automated and didnt require any config on replacement RMA unit but obviously did in this case , also noticed this on Sophos "UTM Disaster Recovery" document:

    1. On the auxiliary node to be added Eth3 should be already configured for Automatic Configuration. If not then you may want to do a factory reset and then follow the steps below:
      • Access the appliance, configure the HA operation mode for Automatic Configuration

    So dont know if something has changed in this respect ?

    thanks - Gregg

Children
No Data
Unfiltered HTML