Wan monitoring and HA failover

Question

Hi, 
 
 I have two nodes with HA going, and on primary node, I disconnect Wan port cable and hope HA will failover to my 2nd node, but it does not. 
 
 1. when I disconnect Wan cable, I do see interface on node showing red, meaning it had detected Wan port failure. 
 2. in link manager, I did setup to ping 8.8.8.8 then failover to next gateway, not sure that will trigger HA failover (I was hoping so) 
 3. in HA, I did setup to monitor both Wan port and Internal port, so I figure any port down, it will cause a failover to 2nd node. 
 
 Anybody can help me to figure out why HA failover is not happening?

Vivek Jagad · Answer

Hello TingYu ,

Thank you for reaching out to the community, please refer the following guides to narrow down the situation. Although we will not recommend to keep WAN link under the HA monitoring, as in any ISP fluctuation scenario there will be an unnecessary failover. Though we would request you to verify the HA settings from the following guide below:

1.) Unsupported configurations - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/HighAvailablityStartupGuide/AboutHA/HAPrerequisitesStartupGuide/index.html#licensing

2.) Failover - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/HighAvailablityStartupGuide/AboutHA/HAOperation/index.html#management

3.) Verify HA status - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/HighAvailablityStartupGuide/VerifyingHAStatus/index.html

4.) Advanced configuration - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/HighAvailablityStartupGuide/HAConfiguration/HARuntimeConfiguration/index.html#keepalive-timer

5.) Manage HA - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/HighAvailablityStartupGuide/HAManage/index.html

6.) Edit gateway details - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/WANLinkManager/NetworkGatewayDetailsEdit/index.html

7.) Configure redundant internet connection using WAN Link Manager feature - https://support.sophos.com/support/s/article/KB-000038337?language=en_US

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.

Wan monitoring and HA failover

Submitted a Tech Support Case lately from the Support Portal?