Check Receiver high availability status

Determine the status of an HA Receiver pair prior to performing an upgrade.

Task

  1. On the system navigation tree, select the primary Receiver-HA device, then click the Properties icon .
  2. In the Status and Secondary Status fields, verify that the status is OK; HA Status: online.
  3. Secure shell, or SSH, to each of the HA Receivers and run the ha_status command from the command-line interface on both Receivers. The resulting information shows the status of this Receiver and what this Receiver thinks the status of the other Receiver is. It looks similar to this:
    OK
    
    hostname=McAfee1
    mode=primary
    McAfee1=online
    McAfee2=online
    sharedIP=McAfee1
    stonith=McAfee2
    corosync=running
    hi_bit=no
  4. Verify the following in the above:
    • The first line of the response is OK.
    • Hostname is the same as the host name on the command line minus the Receiver model number.
    • Mode is primary if the value of sharedIP is this Receiver's host name; otherwise the mode is secondary.
    • The next two lines show the host names of the Receivers in the HA pair and list the running status of each Receiver. The status for both is online.
    • corosync= shows the running status of corosync, which should be running.
    • hi_bit is no on one Receiver and yes on the other Receiver. It doesn't matter which one is which.
      Note: Make sure that only one of the HA Receivers is set with the hi_bit value. If both HA Receivers are set to the same value you should call McAfee Support before doing the upgrade to correct this misconfigured setting.
  5. Secure shell, or SSH, to each of the HA Receivers and run the ifconfig command from the command-line interface of both Receivers.
  6. Verify the following in the data that is generated:
    • The MAC addresses on eth0 and eth1 are unique on both Receivers.
    • The primary Receiver has the shared IP address on eth1 and the secondary Receiver has no IP address on eth1.

      If both HA Receivers are set to the same value, call McAfee support before upgrading to correct this misconfigured setting.

Results

This spot check ensures the system is functional and that no duplication of IP addresses exists, which means that the devices can be upgraded.