topic Re: Cluster Hotfix Installation in Firewall and Security Management

Cluster Hotfix Installation

ikokkoris — Tue, 12 Dec 2023 11:28:48 GMT

Hello,

We have a Cluster with two gateways in R81.10

Before installing the hotfix to the active member, I want to failover traffic to the Standby member. As I saw this can happen with clusterXL_admin down command to the active member. This command forces to reboot the member or not?

I saw in a post the below

Worth to mention that issuing command "clusterXL_admin down" on a node will bring node into DOWN state. In order to put it back to STANDBY (to be available for further failover) you need to issue "clusterXL_admin up".

ClusterXL_admin up makes the node again Active at the cluster state or makes the member Standby from Down?

Thank you in advance for your responses.

Re: Cluster Hotfix Installation

Vincent_Bacher — Tue, 12 Dec 2023 12:11:42 GMT

There is no reboot at this command.

ClusterXL_admin up makes the node again Active at the cluster state or makes the member Standby from Down?

Should be standby. But 2b sure I would consider having a look at the ClusterXL config.

If i am not wrong, with this setting, my answer should be correct. If "Switch to higher priority Cluster Member" is activated AND the affected device is the device with higher prio (on top of the Gateway Cluster members list in the Clusters Members Settings of the Gateway Cluster Properties), it will most likely become active member.

Re: Cluster Hotfix Installation

ikokkoris — Tue, 12 Dec 2023 12:27:36 GMT

Hi Vincent,

The config is as you mentioned (Maintain current active Cluster Member). So, typing ClusterXL_admin up, the member will become Standby from Down in my case.

Thank a lot

Re: Cluster Hotfix Installation

ikokkoris — Wed, 13 Dec 2023 11:28:38 GMT

Hi again,

The management server can have different hotfix from the gateways or not? The version is the same.

Re: Cluster Hotfix Installation

Chris_Atkinson — Wed, 13 Dec 2023 11:38:42 GMT

Yes it can have a different JHF level.

Re: Cluster Hotfix Installation

the_rock — Wed, 13 Dec 2023 11:41:55 GMT

As @Vincent_Bacher that command would simply change cluster state. It never needs a reboot, just make sure when you run clusterXL_admin down to run clusterXL_admin up right after, as that would change the state to standby.

Now, as far as your question for the different hotfixes, yes, absolutely, as long as mgmt server is same OR higher than gateways it manages, hotfix version is irrelevant, though for consistency, its best to keep them all on same jumbo.

Best regards,

Andy

Re: Cluster Hotfix Installation

ikokkoris — Fri, 15 Dec 2023 11:11:19 GMT

It worked as you said!!

Thanks a lot.

Re: Cluster Hotfix Installation

the_rock — Fri, 15 Dec 2023 11:43:25 GMT

Good job!