8.3. Deleting an HA Pair

There are two ways in which an HA pair can be deleted from InCenter:

Performing these two operations is described next.

Deleting the HA Pair and Standalone Node

To delete the HA pair and nodes from InCenter control, the sequence of commands would be the following:

admin@InCenter:/> delete HAPair my-hapair
Deleted HAPair my-hapair
admin@InCenter:/> delete StandaloneNode my-node1
Deleted StandaloneNode my-node1
admin@InCenter:/> delete StandaloneNode my-node2
Deleted StandaloneNode my-node2
admin@InCenter:/> commit

This will remove the HA pair from InCenter control but still leave it fully functioning as an external HA pair. However, the AutoSyncCfg property of the HighAvailability object in both firewall configurations will still be disabled. It is recommended to enable this property.

Deleting the HA Pair and Leaving Standalone Nodes

Instead of removing the HA pair and its component nodes, the requirement may be to keep the nodes in the pair under InCenter control as standalone nodes.

This is done with the following steps:

  1. Delete the HAPair object:

    admin@InCenter:/> delete HAPair my-hapair
  2. The nodes are now standalone in InCenter but their management interface IP address is a shared address and must be changed before activating. If the management interface is if1, this is done with the following commands.

    For NetWall nodes:

    admin@InCenter:/> cc StandaloneNode my-node1
    admin@InCenter:/my-node1> set IP4Address if1_ip
    			Address=10.6.15.87
    Updated IP4Address if1_ip 
    admin@InCenter:/my-node1> cc
    admin@InCenter:/> cc StandaloneNode my-node2
    admin@InCenter:/my-node2> set IP4Address if1_ip
    			Address=10.6.15.89
    Updated IP4Address if1_ip
    admin@InCenter:/my-node2> cc
    admin@InCenter:/> activate
    admin@InCenter:/> commit

    For NetShield nodes:

    admin@InCenter:/> cc StandaloneNode my-node1
    admin@InCenter:/my-node1> set IPAddress if1_ip
    			Address=10.6.15.87
    Updated IPAddress if1_ip 
    admin@InCenter:/my-node1> cc
    admin@InCenter:/> cc StandaloneNode my-node2
    admin@InCenter:/my-node2> set IPAddress if1_ip
    			Address=10.6.15.89
    Updated IPAddress if1_ip 
    admin@InCenter:/my-node2> cc
    admin@InCenter:/> activate
    admin@InCenter:/> commit

This leaves two standalone nodes still under InCenter control.

[Important] Important: Initial management IP must not be the shared IP

Avoid using the shared management IP as the initial standalone management IP for either node in an HA pair, or as setting the shared IP as the management IP when removing them from the HAPair object to become standalone nodes. This could result in both nodes using the same management IP, which can be a valid scenario if the deletion from InCenter is reverted at this stage.

If this needs to be done then first assign some temporary management IP in step 2 above. Then change this to the shared IP later, after the activate and commit.