Sophos Firewall

Discussions View HA Passphrase in CLI

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 4 replies
Subscribers 27 subscribers
Views 2188 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

View HA Passphrase in CLI

Scott Meadows over 5 years ago

Is it possible to view the current HA Passphrase in CLI on a Standalone Primary? I disabled HA on my Auxiliary and would like to re-join it to HA but can't remember what HA passphrase I used.

Thanks!

This thread was automatically locked due to age.

+1 Jaydeep over 5 years ago

Hi Scott Meadows

No, it's not possible to view the current HA passphrase in CLI.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Jaydeep

Is there any reason for not simply disable the HA on the Primary aswell and rebuild the HA as one ?

Would be not a big "act" to perform this task?
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott Meadows over 5 years ago in reply to LuCar Toni

LuCar,

I wasn't sure if disabling HA on Primary would cause me to lose Virtual MACs on Primary and thus cause an outage when ARP entry changed. I'm going to take the disabling Primary route and plan a downtime for any possible outage.

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Scott Meadows

That is actually true, if you have a high availibility network with relaying on such high impact changes.

If you disable the HA, the virtual Macs will be switched back to the physical macs.

Most customers does not notice this, because they quickly refresh the ARP table on their switches and have just a little impact, but if you have such a network with high impact, i would recommend a downtime planned.
Cancel
Vote Up 0 Vote Down

Cancel