Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 7 subscribers
  • Views 1906 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HA, slave failed

Richard Priest1

Hi,

We have a pair of SG650 currently on 9.506-2 and have attempted to update the code by updating the slave 1st, unfortunately this failed and has left the slave in an unusable state, initially it never passed the syncing stage, even after being left for a few days, after a power cycle it now doesn't respond to connection attempts.

I don't have much experience with Sophos UTM, but wanted to check that the following is a reasonable process to being the HA back up

power down slave, & disconnect all interfaces.

Power up & factory reset.

Configure as a HA slave device

Connect configured HA interface

Wait for sync to complete

reconnect all other interfaces.

Are there any gotcha's to look out for when performing this work? Can I do the initial config via CLI / console rather than the web GUI?

Cheers

Rich



This thread was automatically locked due to age.
Parents
  • 0

    Hi Rich and welcome to he UTM Community!

    Simply doing a Factory Reset may not fix whatever problem occurred, so you should be prepared to have to re-image the Slave from ISO and then allow the sync to happen.  In no case should you do any configuring of the Slave after a Factory Reset unless it's to get Up2Dates as in the following.

    With a little luck, your Factory Reset will enable you to start at step 3 after having shut down the Slave.  Here are the instructions I send to my clients:

    1. If needed, do a quick, temporary install so that the Slave can download Up2Dates.
    2. Apply the Up2Dates to the same version as the current Master, do a factory reset and shutdown.
    3. On the current Master, on the 'Configuration' tab of 'High Availability':
        a. Disable and then enable Hot-Standby
        b. Select eth3 as the Sync NIC
        c. Configure it as Node_1
        d. Enter an encryption key (I've never found a need to remember it)
        e. Select 'Enable automatic configuration of new devices'
        f. I prefer to use 'Preferred Master: None' and 'Backup interface: Internal'
    4. Cable eth3 to eth3 on the Slave.
    5. Cable all of the other NICs exactly as they are on the current Master.
    6. Power up the Slave and wait for the good news. [;)]

    If you have any doubts before you start, please show us a picture of the current 'Configuration' tab in 'Management >> High Availability'

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Hi Rich and welcome to he UTM Community!

    Simply doing a Factory Reset may not fix whatever problem occurred, so you should be prepared to have to re-image the Slave from ISO and then allow the sync to happen.  In no case should you do any configuring of the Slave after a Factory Reset unless it's to get Up2Dates as in the following.

    With a little luck, your Factory Reset will enable you to start at step 3 after having shut down the Slave.  Here are the instructions I send to my clients:

    1. If needed, do a quick, temporary install so that the Slave can download Up2Dates.
    2. Apply the Up2Dates to the same version as the current Master, do a factory reset and shutdown.
    3. On the current Master, on the 'Configuration' tab of 'High Availability':
        a. Disable and then enable Hot-Standby
        b. Select eth3 as the Sync NIC
        c. Configure it as Node_1
        d. Enter an encryption key (I've never found a need to remember it)
        e. Select 'Enable automatic configuration of new devices'
        f. I prefer to use 'Preferred Master: None' and 'Backup interface: Internal'
    4. Cable eth3 to eth3 on the Slave.
    5. Cable all of the other NICs exactly as they are on the current Master.
    6. Power up the Slave and wait for the good news. [;)]

    If you have any doubts before you start, please show us a picture of the current 'Configuration' tab in 'Management >> High Availability'

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML