I am currently planning to expand our Maestro environment:
currently: 2*MHO175 + 3*9700 appliances, single site, one security group, VSX with 4 virtual systems, R81.20
this is to be extended to a second data center, the necessary hardware, i.e. another 2*MHO175 + 3* 9700 appliances is available.
How do I expand Maestro single site to dual site without or with minimal downtime? Unfortunately, I have not found any suitable instructions.
What happens to the existing security group and traffic flow if I run the standard setup for dual site like this:
on each MHO
Orch_1_1> set maestro configuration orchestrator-site-amount 2
Orch_1_2> set maestro configuration orchestrator-site-amount 2
Orch_2_1> set maestro configuration orchestrator-site-amount 2
Orch_2_1> set maestro configuration orchestrator-site-amount 2
on site 1 (currently productive)
Orch_1_1>set maestro configuration orchestrator-site-id 1
Orch_1_1#orchd restart
Orch_1_2>set maestro configuration orchestrator-site-id 1
Orch_1_2#orchd restart
on site 2
Orch_2_1>set maestro configuration orchestrator-site-id 2
Orch_2_1#orchd restart
Orch_2_2>set maestro configuration orchestrator-site-id 2
Orch_2_2#orchd restart
on side 1 - Back up the /etc/maestro
Orch_1_1#cp -v /etc/maestro.json ~/maestro.json_BKP
Orch_1_1#cp -v /etc/maestro_full.json ~/maestro_full.json_BKP
Orch_1_2#cp -v /etc/maestro.json ~/maestro.json_BKP
Orch_1_2#cp -v /etc/maestro_full.json ~/maestro_full.json_BKP
on site 2
Orch_2_1> set maestro port 1/31/1 type site_sync
Orch_2_1#orchd restart
Orch_2_2> set maestro port 2/31/1 type site_sync
Orch_2_2#orchd restart
on site 1
Orch_1_1> set maestro port 1/31/1 type site_sync
Orch_1_1#orchd restart
Orch_1_2> set maestro port 2/31/1 type site_sync
Orch_1_2#orchd restart
on site 2
Orch_2_1#orchd restart
Orch_2_2#orchd restart
on site 1
Orch_1_1>set maestro security-group apply-new-config
In which steps does the traffic flow interrupt?
Has anyone already performed a similar task?
Thanks for help
Uwe
