ASA failover: secondary ASA disabled failover on its own

Hi all
I have a failover pair of ASA 5520 (Software Version 8.2(4)4)
located in two different data centers.
Because of a network issue the layer 2 connection between both locations has been interrupted for a couple of seconds and the ASAs went into split-brain as one would expect them to do.
The thing is that after approx. 1 minute the secondary ASA switched off its failover configuration (i.e. "show run" gives "no failover") without anybody telling it to do so. Here is the "show failover history" of the device:
07:57:34 MESZ Aug 15 2011
Standby Ready              Just Active                HELLO not heard from mate
07:57:34 MESZ Aug 15 2011
Just Active                Active Drain               HELLO not heard from mate
07:57:34 MESZ Aug 15 2011
Active Drain               Active Applying Config     HELLO not heard from mate
07:57:34 MESZ Aug 15 2011
Active Applying Config     Active Config Applied      HELLO not heard from mate
07:57:34 MESZ Aug 15 2011
Active Config Applied      Active                     HELLO not heard from mate
07:58:03 MESZ Aug 15 2011
Active                     Cold Standby               Failover state check
07:58:18 MESZ Aug 15 2011
Cold Standby               Disabled                   HA state progression failed
At this point failover was switched off completely and the split-brain remained even after the layer-2-connection has been reestablished.
This is no good.:( I have searched for "HA state progression failed" without any useful result/explanation.
Why did the device switch off failover on its own and how can we assure that it won't do this again?
Best regards,
Grischa

Yes, only thing I needed to do was issuing "failover" on the secondary. It detected its active mate and went properly into standby:
09:16:18 MESZ Aug 15 2011
Disabled                   Negotiation                Set by the config command
09:16:19 MESZ Aug 15 2011
Negotiation                Cold Standby               Detected an Active mate
09:16:21 MESZ Aug 15 2011
Cold Standby               Sync Config                Detected an Active mate
09:16:31 MESZ Aug 15 2011
Sync Config                Sync File System           Detected an Active mate
09:16:31 MESZ Aug 15 2011
Sync File System           Bulk Sync                  Detected an Active mate
09:16:31 MESZ Aug 15 2011
Bulk Sync                  Standby Ready              Detected an Active mate
I guess we will go the TAC way if we encounter this situation a second time. This time we will be warned and know where to look at.
Is there really no documentation available of the "HA state progression failed" message? What does it mean and how is it triggered usually?
Regards,
Grischa

Similar Messages

  • After iOS 8 wifi is being disabled automatically on its own. Even after tapping on wifi signal downward notification link, problem is not solved.

    After I got updated to iOS 8 on iPhone 5c purchased 3 months back, after I tapped on wifi symbol in notification tab, first there will be a signal on top left corner but when I open safari it showed " there is no network or wifi" with message of "cellular data turned off ". Again I have to open settings and turned off and on wifi to get the signal and connected to network. There is no problem with my wifi signal or network but I don't use cellular data at all. Kindly look into the issue and provide me with a solution. Thank you apple and Tim cook. Rip Steve Jobs.

    I have an iPhone 5C.
    iOS 8.0 disabled my Wi-Fi. Actually not just disabled, it made my phone behave as it did not have W-Fi.  I could not re-enable wi-fi. 
    Restarting my phone or resetting network settings made me no difference.
    Solution:
    Power down iPhone for a few minutes
    Power-up and Wi-Fi is back again!
    After updating to the latest iOS 8.0.2 it disabled my Wi-Fi again. Following the power-down procedure above fixed it.
    -Ed

  • My Macbook Pro constantly disables fonts of its own accord. Anybody know a fix?

    For example every few days Avenir (and others) get disabled and I have to re-enable them in Font Book to use.
    I'm on Mountain Lion 10.8.2

    Launch the Font Book application and validate all fonts. You must select the fonts in order to validate them. See the built-in help and the support article linked below for instructions. If Font Book finds any issues, resolve them, then boot in safe mode* (by holding down the shift key at the startup chime) to rebuild the font caches. Boot again as usual and test.
    Mac 101: Font Book

  • Manual failover of ASA

    I have 2 ASA 5510 with image 8.21. When I have to switch from main ASA to BKP ASA, I boot my BKP ASA and then unplug the cables manually from main ASA and plug them into BKP ASA.
    But the problem is that I become unable to access the internet for a very long time. When I see logs via ASDM (since its easy to handle through GUI) then it gives a lot of logs of deny connection inbound. when I plug the cables back into main ASA the internet connectivity resumes and outside clients also resume to access inbound services.
    Do I need to give any extra command on the BKP ASA when I put it into line ?
    Plz help :(

    I don't know why it would take 10 to 15 minutes for TCP applications to recover. Do new connections pass through the firewall? Maybe you have some ARP caching or possibly switch port security is causing delays learning the new MAC address of the secondary firewall.
    You can still configure HA assuming you have available upstream switch ports. Here is what you can do:
    1. Configure HA on the primary firewall and configure the secondary firewall's failover link per the link I previously sent. You'll need stateful failover to maintain connections during a failover.
    2. Connect the secondary firewall's failover interface to the primary firewall's failover interface.
    3. The primary should begin to push the config over to the secondary.
    4. Run "show failover state" and confirm the secondary is listed as standby.
    5. Connect the remaining interfaces on the secondary to your upstream switch.
    6. Run "show failover state" again and confirm the secondary is listed as Standby Ready.
    7. You can now gracefully failover by running "failover active" on your secondary firewall.
    For future failovers you can just plug in your secondary firewall and repeat steps 6 and 7.

  • Disable failover before changing config

    hi
    I'm making some major changes to the config on an active/standby asa this evening and am planning the roll back in case things go bad.
    I'm planning to wr mem the config and then 'no failover' on the Active asa
    THen make the changes.
    If all goes well, hopefully i can re-enable failover and sync the configs with 'failover' on the Active asa  ? And the wr mem the config.
    If all goes bad, i can 'reload' the Active and it should reload the the old config and it can 'failover' to re-enable the clustering.
    Am i correct in these commands? Will 'failover' re-enable or actually failover!
    Also should i be doing these on the Active or Standby asa.
    thanks
    phil  

    Hello Philbe,
    The thing is that as long as you take out the no failover active, the other ASA (standby) will claim to be the active and this one (ex-active) as do not have any failover config will be forwarding traffic so you might get havving network problems as both of the firewalls will be claiming to have the same IP address but different MAC addresses.
    If you want to follow this path you will need to disable failover on the secondary unit first and then on the primary and make the changes (you will miss the failover functionality but at least you will not cause any network outage).
    For me the best way to go is to do it while having the network with failover, make sure you have a backup of the config and a console connection to the firewall so you can inmediatly go back to the previous setup.
    Looking for some Networking Assistance? 
    Contact me directly at [email protected]
    I will fix your problem ASAP.
    Cheers,
    Julio Carvajal Segura
    http://laguiadelnetworking.com

  • After disabling failover can't configure interfaces

    I had a pair of ASA 5510s in failover and needed to move one so I disabled failover. Now I can't configure any of the interfaces. When I put an IP on an interface and then show interface ip brief, it shows as unassigned.
    What else do I have to do after disabling failover to be able to configure the interfaces again?

    Hi,
    Are you not able to assign ip address on both the devices? If i am not wrong, you should be able to assign the ip address to the active one but not to the stand by one. There are two ways to assign ip address to the standby device. One is to reload the stand by so that it comes out of the stand by state.
    Second way is to configure the standby ip address on the interface. For ex on the interface configure:
    ip address 172.16.1.1 255.255.0.0 standby 172.16.1.2
    The stand by device will take the standby ip address.
    Rahul

  • Link outage in Etherchannel causes interface down and failover Secondary Faild

    Hi,
    I have configured port-channel Firewall ASA5515-X and  stacking switch WS-3750X. Also firewall configured as failover mode. Problem is that my active firewall connected switch port show green and working but standby firewall connected switch port shows orange color. When i inpute show failover command on firewall, secondary is faild. Please assist. Here is the below show command.
    mdbl-int-fw-01# sho port-channel 10
    Ports: 2   Maxports = 16
    Port-channels: 1 Max Port-channels = 48
    Protocol: LACP/ active
    Minimum Links: 1
    Maximum Bundle: 8
    Load balance: src-dst-ip
    mdbl-int-fw-01# sho interface port-channel 10
    Interface Port-channel10 "inside", is up, line protocol is up
      Hardware is EtherChannel/LACP, BW 2000 Mbps, DLY 10 usec
            Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
            Input flow control is unsupported, output flow control is off
            Description: *** Connected to CORE-SW ***
            MAC address 4c00.821d.511f, MTU 1500
            IP address 10.98.8.97, subnet mask 255.255.255.248
      Traffic Statistics for "inside":
            56859 packets input, 3419130 bytes
            148709 packets output, 16063580 bytes
            56858 packets dropped
          1 minute input rate 0 pkts/sec,  46 bytes/sec
          1 minute output rate 2 pkts/sec,  216 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 0 pkts/sec,  46 bytes/sec
          5 minute output rate 2 pkts/sec,  216 bytes/sec
          5 minute drop rate, 0 pkts/sec
      Members in this channel:
          Active:   Gi0/1 Gi0/2
    mdbl-int-fw-01# sho port
    mdbl-int-fw-01# sho port-channel sum
    mdbl-int-fw-01# sho port-channel summary
    Flags:  D - down        P - bundled in port-channel
            I - stand-alone s - suspended
            H - Hot-standby (LACP only)
            U - in use      N - not in use, no aggregation/nameif
            M - not in use, no aggregation due to minimum links not met
            w - waiting to be aggregated
    Number of channel-groups in use: 1
    Group  Port-channel  Protocol    Ports
    ------+-------------+-----------+-----------------------------------------------
    10     Po10(U)           LACP    Gi0/1(P)   Gi0/2(P)  
    mdbl-int-fw-01#
    mdbl-int-fw-01# sho port-channel ?      
      <1-48>    Channel group number
      brief     Brief information
      detail    Detail information
      port      Port information
      protocol  protocol enabled
      summary   One-line summary per channel-group
      |         Output modifiers
      <cr>
    mdbl-int-fw-01# sho port-channel bri
    mdbl-int-fw-01# sho port-channel brief
                    Channel-group listing:
    Group: 10
    Ports: 2   Maxports = 16
    Port-channels: 1 Max Port-channels = 48
    Protocol: LACP/ active
    Minimum Links: 1
    Maximum Bundle: 8
    Load balance: src-dst-ip
    mdbl-int-fw-01# sho port-channel ?    
      <1-48>    Channel group number
      brief     Brief information
      detail    Detail information
      port      Port information
      protocol  protocol enabled
      summary   One-line summary per channel-group
      |         Output modifiers
      <cr>
    mdbl-int-fw-01# sho port-channel pro
    mdbl-int-fw-01# sho port-channel protocol
                    Channel-group listing:
    Group: 10
    Protocol: LACP
    mdbl-int-fw-01# sho port-channel ?       
      <1-48>    Channel group number
      brief     Brief information
      detail    Detail information
      port      Port information
      protocol  protocol enabled
      summary   One-line summary per channel-group
      |         Output modifiers
      <cr>
    mdbl-int-fw-01# sho port-channel det
    mdbl-int-fw-01# sho port-channel detail
                    Channel-group listing:
    Group: 10
    Ports: 2   Maxports = 16
    Port-channels: 1 Max Port-channels = 48
    Protocol: LACP/ active
    Minimum Links: 1
    Maximum Bundle: 8
    Load balance: src-dst-ip
                    Ports in the group:
    Port: Gi0/1
    Port state    = bndl
    Channel group =   10        Mode = LACP/ active
    Port-channel  = Po10
    Flags:  S - Device is sending Slow LACPDUs   F - Device is sending fast LACPDUs.
            A - Device is in active mode.        P - Device is in passive mode.
    Local information:
                                 LACP port     Admin     Oper    Port        Port
    Port      Flags   State      Priority      Key       Key     Number      State
    Gi0/1     SA      bndl       32768         0xa       0xa     0x2         0x3d 
    Partner's information:
              Partner Partner    LACP Partner  Partner   Partner  Partner     Partner
    Port      Flags   State      Port Priority Admin Key Oper Key Port Number Port State
    Gi0/1     SA      bndl       32768         0x0       0xa      0x118       0x3d 
    Port: Gi0/2  
    Port state    = bndl
    Channel group =   10        Mode = LACP/ active
    Port-channel  = Po10
    Flags:  S - Device is sending Slow LACPDUs   F - Device is sending fast LACPDUs.
            A - Device is in active mode.        P - Device is in passive mode.
    Local information:
                                 LACP port     Admin     Oper    Port        Port
    Port      Flags   State      Priority      Key       Key     Number      State
    Gi0/2     SA      bndl       32768         0xa       0xa     0x3         0x3d 
    Partner's information:
              Partner Partner    LACP Partner  Partner   Partner  Partner     Partner
    Port      Flags   State      Port Priority Admin Key Oper Key Port Number Port State
    Gi0/2     SA      bndl       32768         0x0       0xa      0x119       0x3d 
    mdbl-int-fw-01#
    mdbl-int-fw-01#
    mdbl-int-fw-01#
    mdbl-int-fw-01#
    mdbl-int-fw-01# sho port-channel ?     
      <1-48>    Channel group number
      brief     Brief information
      detail    Detail information
      port      Port information
      protocol  protocol enabled
      summary   One-line summary per channel-group
      |         Output modifiers
      <cr>
    mdbl-int-fw-01# sho fail        
    mdbl-int-fw-01# sho failover st
    mdbl-int-fw-01# sho failover state
                   State          Last Failure Reason      Date/Time
    This host  -   Primary
                   Active         None
    Other host -   Secondary
                   Failed         Ifc Failure              22:03:03 UTC Jan 8 2014
                                  outside: No Link
                                  dmz: No Link
                                  mgt: No Link
                                  inside: No Link
    ====Configuration State===
            Sync Done
    ====Communication State===
            Mac set
    mdbl-int-fw-01#
    mdbl-int-fw-01#
    mdbl-int-fw-01#
    mdbl-int-fw-01# sho failover     
    Failover On
    Failover unit Primary
    Failover LAN Interface: failover GigabitEthernet0/3 (up)
    Unit Poll frequency 200 milliseconds, holdtime 800 milliseconds
    Interface Poll frequency 500 milliseconds, holdtime 5 seconds
    Interface Policy 1
    Monitored Interfaces 4 of 114 maximum
    failover replication http
    Version: Ours 8.6(1)2, Mate 8.6(1)2
    Last Failover at: 02:16:48 UTC Jan 8 2014
            This host: Primary - Active
                    Active time: 74479 (sec)
                    slot 0: ASA5515 hw/sw rev (1.0/8.6(1)2) status (Up Sys)
                      Interface outside (118.179.139.4): No Link (Waiting)
                      Interface dmz (10.98.56.3): No Link (Waiting)
                      Interface mgt (10.10.11.1): Unknown (Waiting)
                      Interface inside (10.98.8.97): Normal (Waiting)
                    slot 1: IPS5515 hw/sw rev (N/A/7.1(4)E4) status (Up/Up)
                      IPS, 7.1(4)E4, Up
            Other host: Secondary - Failed
                    Active time: 0 (sec)
                    slot 0: ASA5515 hw/sw rev (1.0/8.6(1)2) status (Up Sys)
                      Interface outside (118.179.139.6): No Link (Waiting)
                      Interface dmz (10.98.56.2): No Link (Waiting)
                      Interface mgt (0.0.0.0): No Link (Waiting)
                      Interface inside (10.98.8.98): No Link (Waiting)
                    slot 1: IPS5515 hw/sw rev (N/A/7.1(4)E4) status (Up/Up)
                      IPS, 7.1(4)E4, Up
    Stateful Failover Logical Update Statistics
            Link : failover GigabitEthernet0/3 (up)
            Stateful Obj    xmit       xerr       rcv        rerr     
            General         12665      0          9929       0        
            sys cmd         9929       0          9929       0        
            up time         0          0          0          0        
            RPC services    0          0          0          0        
            TCP conn        0          0          0          0        
            UDP conn        0          0          0          0        
            ARP tbl         2735       0          0          0        
            Xlate_Timeout   0          0          0          0        
            IPv6 ND tbl     0          0          0          0        
            VPN IKEv1 SA    0          0          0          0        
            VPN IKEv1 P2    0          0          0          0        
            VPN IKEv2 SA    0          0          0          0        
            VPN IKEv2 P2    0          0          0          0        
            VPN CTCP upd    0          0          0          0        
            VPN SDI upd     0          0          0          0        
            VPN DHCP upd    0          0          0          0        
            SIP Session     0          0          0          0        
            Route Session   0          0          0          0        
            User-Identity   1          0          0          0        
            Logical Update Queue Information
                            Cur     Max     Total
            Recv Q:         0       7       9930
            Xmit Q:         0       30      99581
    mdbl-int-fw-01#
    mdbl-int-fw-01#
    mdbl-int-fw-01# sho failover state     
                   State          Last Failure Reason      Date/Time
    This host  -   Primary
                   Active         None
    Other host -   Secondary
                   Failed         Ifc Failure              22:03:03 UTC Jan 8 2014
                                  outside: No Link
                                  dmz: No Link
                                  mgt: No Link
                                  inside: No Link
    ====Configuration State===
            Sync Done
    ====Communication State===
            Mac set
    mdbl-int-fw-01# sho failover ?   
      descriptor  Show failover interface descriptors. Two numbers are shown for
                  each interface. When exchanging information regarding a
                  particular interface, this unit uses the first number in messages
                  it sends to its peer. And it expects the second number in
                  messages it receives from its peer. For trouble shooting, collect
                  the show output from both units and verify that the numbers
                  match.
      exec        Show failover command execution information
      history     Show failover switching history
      interface   Show failover command interface information
      state       Show failover internal state information
      statistics  Show failover command interface statistics information
      |           Output modifiers
      <cr>
    mdbl-int-fw-01# sho failover inter
    mdbl-int-fw-01# sho failover interface
            interface failover GigabitEthernet0/3
                    System IP Address: 10.98.8.89 255.255.255.248
                    My IP Address    : 10.98.8.89
                    Other IP Address : 10.98.8.90
    mdbl-int-fw-01# sho failover stati    
    mdbl-int-fw-01# sho failover statistics
            tx:995725
            rx:980617
    mdbl-int-fw-01# sho failover hi        
    mdbl-int-fw-01# sho failover history
    ==========================================================================
    From State                 To State                   Reason
    ==========================================================================
    02:16:40 UTC Jan 8 2014
    Not Detected               Negotiation                No Error
    02:16:48 UTC Jan 8 2014
    Negotiation                Just Active                No Active unit found
    02:16:48 UTC Jan 8 2014
    Just Active                Active Drain               No Active unit found
    02:16:48 UTC Jan 8 2014
    Active Drain               Active Applying Config     No Active unit found
    02:16:48 UTC Jan 8 2014
    Active Applying Config     Active Config Applied      No Active unit found
    02:16:48 UTC Jan 8 2014
    Active Config Applied      Active                     No Active unit found
    ==========================================================================
    mdbl-int-fw-01# sho failover        
    Failover On
    Failover unit Primary
    Failover LAN Interface: failover GigabitEthernet0/3 (up)
    Unit Poll frequency 200 milliseconds, holdtime 800 milliseconds
    Interface Poll frequency 500 milliseconds, holdtime 5 seconds
    Interface Policy 1
    Monitored Interfaces 4 of 114 maximum
    failover replication http
    Version: Ours 8.6(1)2, Mate 8.6(1)2
    Last Failover at: 02:16:48 UTC Jan 8 2014
            This host: Primary - Active
                    Active time: 74554 (sec)
                    slot 0: ASA5515 hw/sw rev (1.0/8.6(1)2) status (Up Sys)
                      Interface outside (118.179.139.4): No Link (Waiting)
                      Interface dmz (10.98.56.3): No Link (Waiting)
                      Interface mgt (10.10.11.1): Unknown (Waiting)
                      Interface inside (10.98.8.97): Normal (Waiting)
                    slot 1: IPS5515 hw/sw rev (N/A/7.1(4)E4) status (Up/Up)
                      IPS, 7.1(4)E4, Up
            Other host: Secondary - Failed
                    Active time: 0 (sec)
                    slot 0: ASA5515 hw/sw rev (1.0/8.6(1)2) status (Up Sys)
                      Interface outside (118.179.139.6): No Link (Waiting)
                      Interface dmz (10.98.56.2): No Link (Waiting)
                      Interface mgt (0.0.0.0): No Link (Waiting)
                      Interface inside (10.98.8.98): No Link (Waiting)
                    slot 1: IPS5515 hw/sw rev (N/A/7.1(4)E4) status (Up/Up)
                      IPS, 7.1(4)E4, Up
    Stateful Failover Logical Update Statistics
            Link : failover GigabitEthernet0/3 (up)
            Stateful Obj    xmit       xerr       rcv        rerr     
            General         12676      0          9938       0        
            sys cmd         9938       0          9938       0        
            up time         0          0          0          0        
            RPC services    0          0          0          0        
            TCP conn        0          0          0          0        
            UDP conn        0          0          0          0        
            ARP tbl         2737       0          0          0        
            Xlate_Timeout   0          0          0          0        
            IPv6 ND tbl     0          0          0          0        
            VPN IKEv1 SA    0          0          0          0        
            VPN IKEv1 P2    0          0          0          0        
            VPN IKEv2 SA    0          0          0          0        
            VPN IKEv2 P2    0          0          0          0        
            VPN CTCP upd    0          0          0          0        
            VPN SDI upd     0          0          0          0        
            VPN DHCP upd    0          0          0          0        
            SIP Session     0          0          0          0        
            Route Session   0          0          0          0        
            User-Identity   1          0          0          0        
            Logical Update Queue Information
                            Cur     Max     Total
            Recv Q:         0       7       9940
            Xmit Q:         0       30      99677

    Hi Ganesan,
    I am proposing a design like this. You can have the STP in pvst mode and have a different priority set for the core switch to make it core a as root bridge. There is nothing wrong with your design you have made you core switch which will be physically down to your firewall... but in real it comes on the top of your firewall as well... But spanning tree conf should be done properly to achieve this... I have proposed my design which is pretty simple but easy for troubleshoot....
    You can have your firewalls connected to core switch on the down and can directly connected to router on outside... always core a -->py fw--rtra will be the primary path... if anything goes wrong then secondary line will come in to picture....
    make sure that your hsrp will have high priority to ur core a vlan conf for the access switches.....
    Please do rate for the helpful posts.
    By
    Karthik

  • To apply license in FWSM (Active-Active mode) and disable failover

    Dear Team
    I want to apply license to increase security context in FWSM which is running in Active-Active mode on VSS Core switches
    As per below document, first we need to disable failover by entering 'no failover' command on active FWSM and then apply the license seperately on both FWSM.
    I just want to know when i will disable the failover then standby move to pseudo-standby state. 
    Will there be any services impact which are running behind the FWSM when disbaling the failover and then re-enabling the failover.
    http://www.cisco.com/c/en/us/td/docs/security/fwsm/fwsm40/configuration/guide/fwsm_cfg/swcnfg_f.html#wp1073226
    Appreciate your response.

    Hi,
    I think in your case as it is Active/Active , there is one extra step required.
    You need to make all the contexts active on one unit and on the other one all should be standby.
    Then disable the failover and update the license and re-enable the failover.
    Thanks and Regards,
    Vibhor Amrodia

  • I have a new MacBook Pro. I am using firefox, but my homepage is set to google. Firefox constantly keeps opening new tabs to its own homepage by itself. How can I disable this feature?

    I have a new MacBook Pro. I am using firefox version 7.0.1, but my homepage is set to google. Firefox constantly keeps opening new tabs to its own homepage by itself. How can I disable this feature.

    Hi [email protected]
    If you have set Google to be your homepage, that should be the first one to appear. Are you seeing the Firefox home page when you open new tabs? New tabs should be blank by default. The only reason I've seen Firefox open new tabs with Firefox data on it is after an upgrade of the product.

  • ORACLE8 OPS 환경에서 FAILOVER SETUP 방법(TRANSPARENT APPLICATION FAILOVER)

    제품 : ORACLE SERVER
    작성날짜 : 2004-08-13
    ORACLE8 OPS 환경에서 FAILOVER SETUP 방법
    ========================================
    SCOPE
    Standard Edition 에서는 Real Application Clusters 기능이 10g(10.1.0) 이상 부터 지원이 됩니다.
    Explanation
    oracle 7 ops (sqlnet v2.3.x 이상)에서는 fail로 인한 failover 지원이 manual
    하게 reconnect를 하도록 하여 지원이 되었다. <bulletin 11033 참고>
    이는 sql*net기능을 사용하여 connection time failover 기능을 사용하는 경우이다.
    하지만, oracle 8 이상 에서는 automatic reconnection이 가능하게 되었다.
    즉, run-time failover가 가능하다.
    이는 일단 connection이 이루어진 후에 발생하는 모든 failover는
    Transparent Application Failover 코드에 의해 처리된다.
    다음은 Oracle 8 TAF(Transparent Application Failover) setup 방법이다.
    tnsnames.ora file에 다음의 parameter를 지정하여 가능하다.
    1. failover_mode : run time 시에 failover가 가능하게 한다.
    2. TYPE (Required) : failover 후의 operation을 지정한다.
    SESSION - failover 발생 시 새로운 session이 다른 instance에
    reconnection되며 이전 session에서의 모든 uncommit된
    작업은 rollback 된다.
    select도 이어서 진행되지 못한다.
    SELECT - failover 발생 시 새로운 session이 다른 instance에
    reconnection되며 이 때 long query나 복잡한 query 등의
    작업 수행 시 작업이 이어서 진행된다.
    단, dml 작업은 rollback된다.
    NONE - This is the default. No automatic failover
    3. METHOD : 어떻게 failover할지를 지정한다.
    BASIC - failover 발생 시에 backup instance(server)로 다시 접속한다.
    PRECONNECT - primary instance와 backup instance 두 개에 모두
    connection 맺어 놓은 후 failover 시에 backup
    instance를 통해 service한다.
    ***< 중요 > 현재 PRECONNECT는 최소한 8.0.5는 되어야 하며
    BASIC은 8.0.6이나 8.1.5에서만 가능하다.
    4. BACKUP : failover 시 접속할 instance의 정보를 기술한다.
    tnsnames.ora의 alias name을 기술한다.
    Example
    다음은 tnsnames.ora file의 example이다.
    < example 1 >
    =========================================================================
    node1.WORLD =
    (DESCRIPTION_LIST =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(Host = node1)(Port = 1521))
    (CONNECT_DATA = (SID = SID1)
    (FAILOVER_MODE = (BACKUP = node2)
    (TYPE = SELECT )
    (METHOD = PRECONNECT))
    node2.WORLD =
    (DESCRIPTION_LIST =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(Host = node2)(Port = 1521))
    (CONNECT_DATA = (SID = SID2)
    (FAILOVER_MODE = (BACKUP = node1)
    (TYPE = SELECT )
    (METHOD = PRECONNECT))
    ========================================================================
    < test 1 >
    1) 각 node의 instance를 start한다.
    2) 각 node의 listener를 구동한다.
    node1% lsnrctl start lsnr_node1
    node2% lsnrctl start lsnr_node2
    3) node1에서 다음의 작업을 한다.
    sqlplus scott/tiger@node1
    SQL> select count(*) from emp;
    COUNT(*)
    14
    4) Node1에서 instance를 shutdown abort한다.
    5) 3번의 session에서 select를 다시 한다.
    SQL> select count(*) from emp;
    ERROR at line 1:
    ORA-25404: lost instance
    다시 select한다.
    SQL> select count(*) from emp;
    COUNT(*)
    14
    Data가 node2 instance를 통해 제대로 select되며 이는 failover가 정상적으로
    작동됨을 알 수 있다.
    < example 2 >
    다음은 TAF(Transparent Application Failover) 기능에 SQL*NET의
    connection time failover 기능을 추가한 경우이다.
    ========================================================================
    node1.WORLD =
    (DESCRIPTION_LIST =
    (DESCRIPTION = (ADDRESS = (PROTOCOL= TCP)(Host= node1)(Port= 1521))
    (CONNECT_DATA =(SID = SID1)(SERVER=SHARED)
    (FAILOVER_MODE = (BACKUP = node2)(TYPE=SESSION)(METHOD=PRECONNECT))))
    (DESCRIPTION =(ADDRESS = (PROTOCOL= TCP)(Host= node2)(Port= 1521))
    (CONNECT_DATA =(SID = SID2)(SERVER=SHARED)
    (FAILOVER_MODE = (BACKUP = node1)(TYPE=SELECT)(METHOD=PRECONNECT))))
    node2.WORLD =
    (DESCRIPTION_LIST =
    (DESCRIPTION =(ADDRESS = (PROTOCOL= TCP)(Host= node2)(Port= 1521))
    (CONNECT_DATA =(SID = SID2)(SERVER=SHARED)
    (FAILOVER_MODE = (BACKUP = node1)(TYPE=SESSION)(METHOD=PRECONNECT))))
    (DESCRIPTION = (ADDRESS = (PROTOCOL= TCP)(Host= node1)(Port= 1521))
    (CONNECT_DATA = (SID = SID1)(SERVER=SHARED)
    (FAILOVER_MODE = (BACKUP = node2)(TYPE=SELECT)(METHOD=PRECONNECT))))
    =======================================================================
    < test 2 >
    1) 각 node의 instance를 start한다.
    2) 각 node의 listener를 구동한다.
    node1% lsnrctl start lsnr_node1
    node2% lsnrctl start lsnr_node2
    3) node1에서 다음의 작업을 한다.
    sqlplus scott/tiger@node1
    SQL> select count(*) from emp;
    COUNT(*)
    14
    4) Node1에서 instance를 shutdown abort한다.
    5) 3번의 session에서 select를 다시 한다.
    ORA-25404 error조차 없이 select된다.
    SQL> select count(*) from emp;
    COUNT(*)
    14
    Data가 node2 instance를 통해 제대로 select되며 이는 failover가 정상적
    으로 작동됨을 알 수 있다.
    (참고 1) dedicated 방식의 경우는 shared 대신에 dedicated를 기술한다.
    물론 initSID.ora의 mts를 기술하지 않고 tnsnames.ora의 server option을 쓰지
    않으면 default로 dedicated 방식을 쓴다.
    (참고 2) example 1을 사용할 경우 session 종료 후 재접속 시 자동 failover가
    되지는 않는다.
    Reference Documents
    oracle8 parallel server concepts & administration manual

    Hi,
    Many Thanks for your inputs. I created 2 non default listeners LISTENER_ORCL1 and LISTENER_ORCL2 on each node respectively.
    I was able to set LISTENER_ORCL as remote listener. But for some reason, the local_listener does not get set. The statement is executed successfully but no changes in the parameters and TAF setup does not work. I initially had the default port number of 1521 for the listener but then changed it to 1522 (to test if it had something to do with default port no) but still no success.
    SQL> show parameters listener
    NAME TYPE VALUE
    local_listener string
    mts_listener_address string
    mts_multiple_listeners boolean FALSE
    remote_listener                  string         LISTENER_ORCL
    SQL> alter system set local_listener='LISTENER_ORCL1' SCOPE=BOTH SID='ORCL1';
    System altered.
    SQL> alter system set local_listener='LISTENER_ORCL2' SCOPE=BOTH SID='ORCL2';
    System altered.
    SQL> show parameters listener
    NAME TYPE VALUE
    local_listener string
    mts_listener_address string
    mts_multiple_listeners boolean FALSE
    remote_listener string LISTENER_ORCL
    Help Plssssssssssss!!!!!!!!

  • Move configure from old ASA to new ASA 5515x?

    Dear All,
    Could you let me know how can i move my configuration from ASA 5510 v.8.0 to the new ASA 5515-x V9.1.1?
    i used copy running to TFTP and apply to the new ASA but it has some error like nat and Certificate.
    could i export my certificate the old ASA and import to the new ASA, that are different version. Does has any solution without donwtime ?
    Best Regards,
    Rechard

    Rechard
    I do not believe that there is a way to do the transition from old ASA running 8.0 to new ASA running 9.1 without some downtime. But is is possible to minimize the downtime. I have recently done a transition like that and it was not an easy one. As you have discovered if you attempt to copy the old config to the new ASA it will reject as invalid syntax much of the access lists and all of the nat.
    The easier way to do the transition is to have an ASA running the old code with the old config and to upgrade that ASA to 9.1. In this process the 9.1 code should read the config from startup and will do a conversion to the new syntax. I have done this going from 8.0 to 8.4 and see no reason why 9.1 would be different. You then only need to check the accuracy of the conversion. And then you can take the converted config and load it on the new ASA. In my recent conversion we did not have an extra ASA with old code, the new ASA does not support the old version, and the downtime to do this on the existing ASA was not acceptable. So I took the access lists and nat and did a manual translation from old to new. I loaded the modified config on the new ASA and did some checking. We then just switched connections from old ASA to new ASA and the downtime was minimal.
    HTH
    Rick

  • Find My iPhone keeps disabling on its own?

    Its a verizon iPhone 4S running 6.1.3. Find my iPhone under the iCloud settings keeps disabling itself. it doesnt even ask me for permission. It just randomly does it on its own. It usually turns off in a day or 2. I've seen it turn off in hours though. Could it be something I did? I've tried putting on restrictions and disable account changes but its as useful as a calculator on an english test. Has anyone had this problem?

    I have a 4S as well, and am with Fido in Canada, and I'm having the same issue where my iPhone suddenly loses all of my calendar and notes information.  My "find my phone" feature disables on its own as well.  I still have my contacts, and everything is still on icloud when I sign in using my mac, but they are deleted on my phone.  Maybe it is due to large gaming (or other RAM-eating apps).  Whatever the issue is, it's certainly annoying!
    I've tried just backing up my phone using iTunes instead of through iCloud, but it's not as good at keeping files up to date if I lose them.  I never had this issue before iOS7.  I would backup through iTunes, and sync all my devices so that I wouldn't lose most of the data.  Now, the data isn't lost; it's just not STAYING on my phone.  Get it together, Apple.  I like you a lot, but I had higher expectations from you.

  • After ios 8 update I can no longer play music through my car. I have a 2012 Nissan Rogue - whihc has its own cable made to use with iPhone 4 - I use a apple adapter to converst to use with 5.

    After ios 8 update I can no longer play music through my car. I have a 2012 Nissan Rogue - which has its own cable made to use with iPhone 4 - I use a apple adapter to converst to use with 5. Has been working fine up until update. Is there a fix for this? The car does not have usb

    Here I come to save the daaaaaaaaaay!!!
    Had the same issue with my Nissan Rogue 2011.
    This listed below will fix it...
    Go to General > Restrictions > CarPlay -- Make sure Carplay is DISABLED. (The new IOS 8 enables this on default)
    Go to General > Reset > Reset Network Settings
    The Nissan Rogue radio system was never designed to work with CarPlay. By default, CarPlay feature comes enabled when you install IOS 8. Suckz, right?
    You're very welcome! Have a great day!
    Sincerely,
    The Superhero

  • HP ENVY 4500 creates its own SSID on my WiFi network causing problems and confusion

    I am finding this problem hard to articulate clearly and I can’t find any information on the internet about why my new HP Envy 4500 printer has set itself up with its own SSID on my WiFi network, but here goes :
    I bought an HP Envy 4500 all in one printer for my daughter’s room in university, which has a WiFi network with WPA security. First I tried to add this printer to the room WiFi using the printer menu, but it gave an error stating that the WPA passkey format was incorrect, when in fact it was the correct password. So instead I had to install the printer using the installation options accessed from the HP website using her laptop.
    This has worked, but it has also set the printer up with its own independent SSID called ‘HP-Setup-45-ENVY 4500 Series’. This separate SSID for the printer is causing some problems and does not seem to have any useful purpose. For example sometimes documents randomly will not print from the laptop, but if you then disconnect the laptop from the room SSID and reconnect it to the printer SSID, the documents will then print, but then you have to reconnect to the room's SSID when done. This is confusing and of course completely unwanted behaviour.
    Does anyone know why this new SSID called ‘HP-Setup-45-ENVY 4500 Series’ has been set up for the printer please? Can I get rid of it so that printer is simply a device connected on the WiFi network in the room please?
    I hope this makes sense as this a very frustrating issue for something that should be completely straightforward.
    Thanks.
    This question was solved.
    View Solution.

    Go into the printer settings and disable Wireless Direct. Done.
    Say thanks by clicking the Kudos Thumbs Up to the right in the post.
    If my post resolved your problem, please mark it as an Accepted Solution ...
    I worked for HP but now I'm retired!

  • Why is firefox crashing or closing on its own, I get plug-in crashes and unresponsive script warnings?

    Firefox is closing on its own or crashing for no reason. I've put in at least 4 crash reports a day. I'm also getting plug-in crashes and have sent those reports in. Also, I'm getting lots of unresponsive script warning messages. At first I thought it was Facebook but it is now doing it on GMail so is it Firefox?

    I am not sure I did this right. This is what I did: right-mouse clicked on the desktop, whent to properties, went to display properties, went to settings, clicked on advanced tab, and then clicked on troubleshooting tab. There I drug the hardware acceleration slider to the left to disable it, clicked ok twice as directed, restarted the computer and then I couldn't get firefox to open at all, but I went to internet explorer and got on you tube and tried to watch a video, but it crashed again.
    So I don't think that worked. I couldn't figure out how to disable hardware acceleration in the Flash plugin, but did it on the desktop instead. Are there different steps I need to take to accomplish this?
    Thank you!

Maybe you are looking for

  • How to get only the lower words with 10g regular expressions?

    below is a small test case, but last sql didn't work as I expected, any suggestions? thank you. CREATE TABLE tab_regexp_tst ( vtest_col VARCHAR2(50) ); INSERT INTO tab_regexp_tst VALUES ('hakan'); INSERT INTO tab_regexp_tst VALUES ('KEMAL'); INSERT I

  • I am not able to burn a purchased song to a CD. Any clues?

    I am not able to burn a purchased song to a CD.  I follow the instructions, and it looks like it will start, but it never happens, it ends after about 20 minutes, saying that an unknown error occurred (4000).  Anyone know how to remedy this?

  • Communication channel properties

    Hi All, Is there a way to fill up the properties of a communication channel through a look up , so that we don't have to fill them up after transport everytime . But in any case the channel fields go blank , can we avoid that somehow . Thanks & Regar

  • What's up with the ipod touch photo quality

    what's up with the ipod touch photo quality

  • Reqirement type and item category

    dear friends, can u please tell me the link between requirement type and item category? i want to use the special stock for the delivery and as well as purchase requirement in case stock is not there... i m getting the right combination. plzz help...