Hi everyone,
i've this problem, when i try to upgrade the firmware from 19.0.1 to 19.5.0 manually with signature file on XGS136 the firewall cluster start to flot from
primary - auxiliary to standalone - fault...
This happens only if one of the monitored interface has a DHCP server configured on the firewall....
Has anyone had the same problem?
Hello David, Marek,
There is one suspected area noticed by dev team related to link flapping in XGS appliances.
Internal ticket is raised (NC-111325) and team is working on it.
Someone from engineering will contact you to help us verify the fix once it's ready.
Meanwhile, you can try this workaround for time being (not full proof but can help reduce the probability):
- Please disable the HA pair and upgrade both the appliances separately to 19.5 and enable HA again.
- As HA is sensitive to interface up/down event, I suggest to remove "monitoring links" from HA configuration.
- It will still have possibility of split-brain if dedicated link will up/down randomly. To minimize its probability, I would suggest to increase "keepalive interval" and "keepalive attempts" to MAX value (500ms and 24 respectively).
Regards,
Sanket Shah
