topic Disconnect Sync Link in Firewall and Security Management

Disconnect Sync Link

Alex_Sykes — Fri, 31 Jan 2020 11:43:58 GMT

Hi,

We have to move the sync link on our clustered gateways (R80.20) because we are decommissioning the switches it runs through.

What steps need to be taken before disconnecting the sync link? Do we have to run clusterXL_admin down on the secondary gateway before we disconnect anything?

I don't want to disconnect the link and both gateways think they're active.

Thanks

Alex

Re: Disconnect Sync Link

Chris_Atkinson — Fri, 31 Jan 2020 12:36:58 GMT

Hi Alex,

sk133372 should help with your nerves, but yes you can do it in a more controlled manner.

Regards,

Chris

Re: Disconnect Sync Link

Timothy_Hall — Fri, 31 Jan 2020 14:30:59 GMT

The sync connection is only used for state table synchronization, disconnecting it will not cause a split brain. CCP is emanated out all interfaces presenting a cluster IP, and that is how the cluster members coordinate with each other.

Re: Disconnect Sync Link

Alex_Sykes — Mon, 03 Feb 2020 16:00:50 GMT

That's great, thank you very much for responding.

Re: Disconnect Sync Link

KostasGR — Thu, 18 Nov 2021 19:33:17 GMT

Hello @Chris_Atkinson

The sk133372 is relevant for r80.30?

What is the controlled manner in case of a VSX cluster ( vsls mode )with 4 members at VSes level?

BR,

Kostas