This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Update from 19.5.3 to 20.0 broke HA

Ingo Buyny 10 months ago

Hello,

Two XGS3300 in an working Active/Passive Cluster, not working after the update to 20.0.

I deleted the Cluster and tried to re-establish it but it fails all the time.

I tried several times with Quick HA or Interactive Mode.

Tried with VLAN Ports or unbound Ports.

Both dedicated HA Ports are pingable from each other and SSH/Ping is allowed for DMZ Zone.

Both Firewalls are removed from Sophos Central.

After trying to restore the cluster a few times, both firewalls suddenly went into fail-safe mode and I had to restore my primary firewall from a backup.

The Auxillary was factory-resetted an i reconfigured the network ports to match them with the primary.

But i still get "HA could not be established" all the time and i'm running out of ideas.

This thread was automatically locked due to age.

Top Replies

LuCar Toni 10 months ago in reply to LHerzog +1 verified

You will find another point about this on the KIL: https://doc.sophos.com/support/kil/index.html NC-127246

0 Raphael Alganes 10 months ago

Hello Ingo Buyny ,

Thanks for reaching out to Sophos Community.

Regret to hear you bumped into an issue. I may recommend you open a support ticket to have this further investigated.

Kindly share with us the caseID once you have it.

Many thanks for your time and patience and thank you for choosing Sophos.

Regards,

Raphael Alganes
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ingo Buyny 10 months ago in reply to Raphael Alganes

CaseID: 07168850
Cancel
Vote Up 0 Vote Down

Cancel
0 Raphael Alganes 10 months ago in reply to Ingo Buyny

Hello Ingo Buyny ,

Thanks for taking the time to share with us the caseID. I have referred the details you've shared on the community on your case notes.

Please keep an eye out on your email/phone/mobile for the touch base of an engineer.

Again, thanks for your time and patience and thank you for choosing Sophos.

Regards,

Raphael Alganes
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Speedfish 10 months ago

It would be interesting if thats a general issue cause we also think to update our XGS at some point.
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog 10 months ago in reply to Speedfish

eventually the dedicated HA Link Port has changed on one node. Had that once when going to MR3 18.5 MR2 to MR3 Upgrade broke HA cluster and node not updating

need to connect locally to both nodes and login webadmin - check interfaces

you wrote you did - eventually double check?
Cancel
Vote Up 0 Vote Down

Cancel
+1 LuCar Toni 10 months ago in reply to LHerzog

You will find another point about this on the KIL:

https://doc.sophos.com/support/kil/index.html NC-127246

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel
0 Ingo Buyny 10 months ago in reply to LuCar Toni

That was it, thank you very much!

Was trying to resolve the issue with Sophos Support but the technician had no idea either, so he just wanted to dig into the logfiles.

I always tried to establish with unbound interfaces or with vlans on unbound interfaces.

After setting an ip to my dedicated interface and set the DMZ Zone the HA established in no time without any error.
Cancel
Vote Up 0 Vote Down

Cancel