This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Update from 19.5.3 to 20.0 broke HA

Ingo Buyny 10 months ago

Hello,

Two XGS3300 in an working Active/Passive Cluster, not working after the update to 20.0.

I deleted the Cluster and tried to re-establish it but it fails all the time.

I tried several times with Quick HA or Interactive Mode.

Tried with VLAN Ports or unbound Ports.

Both dedicated HA Ports are pingable from each other and SSH/Ping is allowed for DMZ Zone.

Both Firewalls are removed from Sophos Central.

After trying to restore the cluster a few times, both firewalls suddenly went into fail-safe mode and I had to restore my primary firewall from a backup.

The Auxillary was factory-resetted an i reconfigured the network ports to match them with the primary.

But i still get "HA could not be established" all the time and i'm running out of ideas.

This thread was automatically locked due to age.

Top Replies

LuCar Toni 10 months ago in reply to LHerzog +1 verified

You will find another point about this on the KIL: https://doc.sophos.com/support/kil/index.html NC-127246

Parents

0 Speedfish 10 months ago

It would be interesting if thats a general issue cause we also think to update our XGS at some point.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Speedfish 10 months ago

It would be interesting if thats a general issue cause we also think to update our XGS at some point.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 LHerzog 10 months ago in reply to Speedfish

eventually the dedicated HA Link Port has changed on one node. Had that once when going to MR3 18.5 MR2 to MR3 Upgrade broke HA cluster and node not updating

need to connect locally to both nodes and login webadmin - check interfaces

you wrote you did - eventually double check?
Cancel
Vote Up 0 Vote Down

Cancel
+1 LuCar Toni 10 months ago in reply to LHerzog

You will find another point about this on the KIL:

https://doc.sophos.com/support/kil/index.html NC-127246

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel
0 Ingo Buyny 10 months ago in reply to LuCar Toni

That was it, thank you very much!

Was trying to resolve the issue with Sophos Support but the technician had no idea either, so he just wanted to dig into the logfiles.

I always tried to establish with unbound interfaces or with vlans on unbound interfaces.

After setting an ip to my dedicated interface and set the DMZ Zone the HA established in no time without any error.
Cancel
Vote Up 0 Vote Down

Cancel