- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
Breaking Up A High Availability Pair
03/26/2020 
11 People found this article helpful
35,670 Views
Description
An administrator could use the following instructions to take a clustered pair of appliances and split them apart into two separate appliances. Customers who perform this procedure must contact sales to obtain licenses for each node.
Resolution
Warning Use the command line at your own risk. SonicWall strongly recommends that users not familiar or comfortable with the command line contact SonicWall product support for assistance. See KB ID SW2500 for some suggestions on enabling SSH access to the appliance and getting onto the command line.
The following steps must be performed on both nodes of the cluster.
Back up configuration on each appliance
- From the command line of each appliance, run the following command:
config_backup - Use WinSCP to copy /var/backups/cfgback.tgz from each appliance to your local computer.
- From AMC on each appliance, navigate to System Configuration | Maintenance | Import or Export | Import/Export and export the configuration of the appliance. You will download the .aea file to your local computer.
Reconfigure networking
- Remove the crossover cable from the pair; it will no longer be necessary.
Reset the configuration on each appliance
- Establish a serial connection to each appliance and issue the following command:
config_reset - After the configuration has been reset, reboot the appliance.
- When the appliance reboots, log in as root and configure the appliance with enough network information for you to be able to log into AMC.
Import the configuration onto each appliance
- Now that you have configured AMC for access, log into AMC and configure base networking information: DNS, domain, WINS, routes, and additional interfaces. Each system should have its own unique IP addresses.
- Import the configuration (the .aea file) that you saved earlier.
- Navigate to System Configuration | Maintenance | Import or Export | Import/Export and choose to import a Partial configuration.
- Apply changes to allow the appliance to load the configuration.
Contingency plan
The cfgback.tgz file saved earlier contains a full configuration of each appliance. If you decide to revert to the clustered configuration you must perform the following steps:
- Reconnect the crossover cable between both nodes.
- Copy cfgback.tgz to /var/log/backups on both nodes. It should be named cfgback.tgz in that directory.
- Run the following command to restore the configuration:
config_restore - Reboot the nodes after the configuration restoration. The appliances should be back to their original states.
Related Articles
- Product Security Notice: SMA 100 Series Vulnerability Patches (Q4 2021)
- Initial Setup Guide of SMA1000 for high security environments
- How can I get root access to SMA100
YES
NO