Slave stuck in "RESERVED" after up2date to 9.506-2 - master still on 9.505-4

Chris, is the Master at 9.506 now?  If so, then it seems like the process almost completed normally.

The first step in an HA Up2Date is for the Master (let's say this is node 1) to Up2Date the Slave (node 2).  Once the node 2 is Up2dated, rebooted and synced with the Master node, node 2 becomes Master.  Finally, node 2 Up2Dates node 1, node 1 then reboots and syncs with node 2.

I would get Sophos Support involved to confirm that you don't have a hardware problem.  After you get a case opened, you can try one thing to see if you can get HA active again without having to re-image the current Slave:

1. In the Master, set HA to "Off" - the Slave will do a factory reset and shut down.
2. Set HA back to "Hot-Standby."
3. Power up the Slave.  It should rejoin, sync and return to status READY.

Cheers - Bob

Bob,

thank you for your reply. Since I am running some UTMs for several years I do know what a normal HA up2date process looks like and I know that this HA cluster has no hardware problems at all, too. :)

But thank you anyway for your input.

I resolved it some minutes ago (at the weekend I can risk downtimes) by myself:

- deleted up2date packages on node1 & 2 (node2 is slave and the only one at 9.506)

- fired up update process on node1 at command line

- rebooted node1

- slave (still in reserved mode) did not take over

- node 1 came online again

- HA came up by itself

So if anyone gets stuck in the same thing - give it a try but you get a downtime during that procedure.

Cheers, Chris

Yes - if the Master was not yet at 9.506, your solution is exactly correct, Chris.

For others, if the Slave is not in Reserved mode, you will want to power it down and then back up again after the Master has finished its Up2Dating and is back up.

I appreciate that Sophos' Support policies are different for Europe and North America.

Cheers - Bob

BAlfson said:

I appreciate that Sophos' Support policies are different for Europe and North America.

 

I am just curios: Where is the difference? The last time a opened up a support call is 2 years ago so I don´t know...

Cheers - Chris

In general, in NA, customers with Standard Support contact their reseller to get a case open directly with Sophos and we don't charge extra to do that.

Cheers - Bob

Same here in Europe.

Cheers, Chris

There must have been a change because I have worked with people in Germany over the years.  If that's the case, I would want to have Sophos look at the logs just to confirm that there wasn't a hardware glitch at the bottom of this.

Cheers - Bob