We have a management server running R60 and two cluster members on R54. On Tuesday night, we attempted to upgrade our R54 servers to R60. We brought one of the servers down, rebuilt it and brought it online. We had planned to push a policy to this server, bounce the other one, and rebuild that one after the first was online.
After the first one was back up, we were unable to push out a policy to the servers. So, we backtracked, wiped the first firewall again and reinstalled R54. So both servers are on R54 again.
Now, I am unable to get the cluster to be stable. The sync interface on the second firewall (the one we never changed) shows down. Also, we don't have the password for the second firewall (which is why we were wiping/rebuilding them to upgrade to R60.)
Here is some information from the first FW. Maybe somebody can make some recommendations on what to try next?
Code:
[fw-ep1]# cphaprob state
Cluster Mode: New High Availability (Active Up)
Number Unique Address Assigned Load State
1 (local) 192.168.32.44 100% active
2 192.168.16.45 0% down
Code:
Sync:
Version: new
Status: Able to Send/Receive sync packets
Sync packets sent:
total : 15096585, retransmitted : 0, retrans reqs : 0, acks : 0
Sync packets received:
total : 0, were queued : 0, dropped by net : 0
retrans reqs : 0, received 0 acks
retrans reqs for illegal seq : 0
dropped updates as a result of sync overload: 0
[fw-ep1]#