- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- MDM HA failover all DMS R81.20
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
MDM HA failover all DMS R81.20
Hi
Is there a quicker / easier way to fail over all DMS/CMA in one go rather than having to go into each one to fail over from Standby > Active? We're not wanting to promote the Secondary MDM to Primary, just change standby > active.
- Labels:
-
Multi-Domain
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
No. By design, management HA only supports manual failover
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
No. By design, management HA only supports manual failover
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yeah I understand it's manual failover, what I'm asking is that say we have 50 domains and it takes around 2 min to load smartconsole to each that'd take a while to do one by one. I'm wondering if there's a way to fail them all over (manually) but all in one go
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
No, there is not any other way
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can use API call "set ha-state".
Best would be to create some small script which will check state of all domains (including Global Domain). Based on need, you can use "set ha-state" to set one domain as Active and others as Standby.
Jozko Mrkvicka
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Check Point provides an Ansible module for this, too:
Note, however, that the management server API set-ha-state is only available since R80.40 + Jumbo HFA 78. Likewise, you also need Ansible module v5.0.0 or higher. Be sure you have these minimum requirements.
Setup your Ansible inventory for each MDS, plus each domain, in an organized way, and you can automate this process to ensure consistency and that you don't miss anything.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is actually a very good idea
