topic Re: Configuration in HA MDS in Firewall and Security Management

Configuration in HA MDS

Matlu — Wed, 25 Jun 2025 19:45:59 GMT

Hello everybody.

In an MDS HA environment, if you configure something in the HA standby member, this configuration is ‘replicated’ in the ‘Active’ member?

Or does the configuration stay locally on the MDS Standby?

Thanks for your comments

Re: Configuration in HA MDS

joerivang — Wed, 25 Jun 2025 20:13:07 GMT

You have a primary and secondary management. On secondary (or standby) you can read-only in SmartConsole, so no changes are possible there. Changes using SmartConsole can only be done on the primary (active) management.

CLI changes are never synced.

Re: Configuration in HA MDS

Matlu — Wed, 25 Jun 2025 21:14:53 GMT

Hello,

By CLI, can you validate if your login account is in "read only" mode?
If I run a script in the MDS Standby, this will not work (if the script is to create objects in the MDS).

Thanks.

Re: Configuration in HA MDS

the_rock — Thu, 26 Jun 2025 00:34:45 GMT

Hey bro,

What @joerivang is indeed the case. By the way, just for the context, as LOTS of people confuse these things...primary will ALWAYS be primary and secondary WILL always be scondary, unless rebuilt. Either one can be active/standby.

Andy

Re: Configuration in HA MDS

joerivang — Thu, 26 Jun 2025 05:18:10 GMT

CLI is just CLI, you're logging into the local machine. On a CLI point of view you could run a script, but in that script you'll always have to define the primary management to execute on. This script can then be run on the secondary management, making the changes to objects on the primary management.

Re: Configuration in HA MDS

the_rock — Thu, 26 Jun 2025 10:30:32 GMT

Correct, and as you said, cli commands are definitely not synced.

Andy