topic How to failover a VSX cluster in VSLS mode? in Firewall and Security Management

How to failover a VSX cluster in VSLS mode?

DR_74 — Thu, 08 Apr 2021 08:07:37 GMT

Hi,

I need to perform a full failover of my VSX Cluster XL environment for a maintennace window. (R80.30)

Right now, the VSX cluster uses VSLS but all VSs are active on the same VSX node (member1).

So what would be the best way to force a full failover to the VSX member2?

I read sk56060 which says the best way is "clusterXL_admin down" but in sk95133, it is said that with "clusterXL_admin down" the VS do not become active on the Active Member.

In our case we need to have all VS switched to VSX member2 (included vs0)

Thanks for clarification and help

Re: How to failover a VSX cluster in VSLS mode?

Sigbjorn — Thu, 08 Apr 2021 08:18:16 GMT

The proper way to do a controlled failover would be to use the "vsx_util vsls" tool.

Run it on the management server, and connect to the vsx cma/sms to change priority and move the virtual systems.

Re: How to failover a VSX cluster in VSLS mode?

DR_74 — Thu, 08 Apr 2021 08:25:50 GMT

Hello,

Thanks for the reply.

Does this also failover the vs0? or only the other vs?

Re: How to failover a VSX cluster in VSLS mode?

Sigbjorn — Thu, 08 Apr 2021 08:36:24 GMT

That's just to configure the distribution of the virtual systems. We don't process traffic on vs0 for our VSX clusters, that's just for management, snmp etc, so a failover there wouldn't be required for normal upgrade operations.

If you must failover vs0 as well, I think clusterXL_admin down in that context is a decent option.

Re: How to failover a VSX cluster in VSLS mode?

DR_74 — Thu, 08 Apr 2021 08:38:37 GMT

Actually, we need to perform a failover for a Case.

We were asked to switch everything on the other node (all VS including vs0).

Re: How to failover a VSX cluster in VSLS mode?

Bob_Zimmerman — Thu, 08 Apr 2021 14:17:14 GMT

You can always just run 'cphastop'. It's a bit brute force, but should stop clustering entirely on the member where it is run, which will cause the other members to realize it's down and rebalance.

You mentioned you're using VSLS, but all your active contexts are on the same member. That seems odd. Are you sure you're using VSLS and not normal HA?

Re: How to failover a VSX cluster in VSLS mode?

Anthony_Kahwati — Thu, 08 Apr 2021 14:50:02 GMT

Agree with this as well. We have always used vsx_util to manually move the VS's until we want them back where they belong. If it is for a case, this sounds like the best and cleanest option.

Re: How to failover a VSX cluster in VSLS mode?

DR_74 — Thu, 08 Apr 2021 14:56:33 GMT

Yes, VSLS is used as if we are in HA mode. Just in case one day we need to share VS on the different VSX.

Thanks to your answer I was able to play with:

- clusterXL_admin up|down to failover a single VS (1 by 1)

- cphastop to failover everything in 1 command

- vsx_util vsls to switch VS without putting in DOWN state