Knowledge Search


×
 

Forcing a Device from Master to Backup Device in NSRP

  [KB5885] Show Article Properties


Summary:
How can I manually fail over the master to the backup device (NSRP)?
Symptoms:

Symptoms & Errors:

  • How can I manually fail over the master to the backup device in the CLI?
  • Force a pair of NetScreens in High Availability (HA) to fail over
  • How can I safely failover to the backup (NSRP)?
Solution:

Let's say 'device A' is the master firewall, and 'device B' is the backup firewall running NSRP.

a. Log into device A using an application such as Telnet or SSH (or HyperTerminal if directly connected through the console port). Log in as the root admin or an admin with read-write privileges.

b. Issue one of the following CLI commands on device A. The command you need to execute depends on whether or not the preempt option is enabled on the master device.

If the preempt option is enabled:
exec nsrp vsd-group 0 mode ineligible

If the preempt option is not enabled:
exec nsrp vsd-group 0 mode backup

Either command forces the primary device to step down and the backup device to immediately assume the primary device role.



Note:  To change the state of the firewall from ineligible to backup (or to make the firewall eligible to be backup), enter the command:
exec nsrp vsd-group 0 mode backup

Related Links: