HA flop on manual firmware upgrade to 19.5

Question

Hi everyone, 
 i've this problem, when i try to upgrade the firmware from 19.0.1 to 19.5.0 manually with signature file on XGS136 the firewall cluster start to flot from 
 primary - auxiliary to standalone - fault... 
 This happens only if one of the monitored interface has a DHCP server configured on the firewall.... 
 
 Has anyone had the same problem?

sanket.shah · Accepted Answer

Hello David, Marek, 
 
 There is one suspected area noticed by dev team related to link flapping in XGS appliances. 
 Internal ticket is raised (NC-111325) and team is working on it. 
 Someone from engineering will contact you to help us verify the fix once it's ready. 
 
 Meanwhile, you can try this workaround for time being (not full proof but can help reduce the probability): 
 - Please disable the HA pair and upgrade both the appliances separately to 19.5 and enable HA again. 
 - As HA is sensitive to interface up/down event, I suggest to remove "monitoring links" from HA configuration. 
 - It will still have possibility of split-brain if dedicated link will up/down randomly. To minimize its probability, I would suggest to increase "keepalive interval" and "keepalive attempts" to MAX value (500ms and 24 respectively). 
 
 Regards, 
 Sanket Shah

David Moro · Answer

The firewalls turns off the ha module when i was upgrading to 19.5... i've installed the update individually then redo the HA. 
 I've opened a support case and Sophos following it... now i got 3 cluster that went on this state after upgrading it to 19.5...

Vivek Jagad · Answer

Hello David Moro , Thank you for reaching out to the community, May we know the deployment is it active-passive or active-active, please refer the Unsupported configurations

Vivek Jagad · Answer

Alias IP addresses or VLANs on dedicated HA port only !! interfaces are dynamically configured using DHCP or PPPoE , only HA in active-passive mode is supported. HA in active-active mode isn&rsquo;t supported.

HA flop on manual firmware upgrade to 19.5

Top Replies