- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
High Availability States in SonicWall
02/02/2022 
33 People found this article helpful
93,447 Views
Description
The Primary SonicWall and Secondary SonicWall in High Availability Pair, when configured, go through different states. This article describes about each state briefly.
Resolution
The Primary State field and Secondary State field is displayed on both the Primary and the Secondary HA appliances. Primary State Indicates the current state of the Primary appliance as a member of an HA Pair.
To verify the current HA states on both Primary and Secondary SonicWall appliances:
Navigate to Device| High Availability | Status
CAUTION: DON'T perform any configuration change while the units are in SYNC or REBOOT state. When the idle unit is doing a complete configuration sync and the active firewall is still under configuration, after the idle unit reboots following complete configuration sync, the secondary will detect the peer has newer configuration and may lead to another complete sync for the secondary. If configuration changes keep being applied when the idle unit is in SYNC or REBOOT state, it may enter in a reboot loop until the idle unit has the same configuration.
We recommend performing configuration changes while the units are ACTIVE/STANDBY. This stability will allow for incremental configuration synchronizations and will not force the reboot on the idle unit for complete configuration sync.
Different state values on Primary Appliances are mentioned below:
- ACTIVE – Indicates that the Primary unit is handling all the network traffic except management/monitoring/licensing traffic destined to the standby unit.
- STANDBY – Indicates that the Primary unit is passive and is ready to take over on a Failover.
- ELECTION – Indicates that the Primary and Secondary units are negotiating which should be the ACTIVE unit.
- SYNC – Indicates that the Primary unit is synchronizing settings or firmware to the Secondary.
- ERROR – Indicates that the Primary unit has reached an error condition.
- REBOOT – Indicates that the Primary unit is rebooting.
- NONE – When viewed on the Primary unit, NONE indicates that HA is not enabled on the Primary. When viewed on the Secondary unit, NONE indicates that the Secondary unit is not receiving heartbeats from the Primary unit.
Different state values on Secondary Appliances are mentioned below:
- ACTIVE – Indicates that the Secondary unit is handling all the network traffic except management/monitoring/licensing traffic destined to the standby unit.
- STANDBY – Indicates that the Secondary unit is passive and is ready to take over on a Failover.
- ELECTION – Indicates that the Secondary and Primary units are negotiating which should be the ACTIVE unit.
- SYNC – Indicates that the Secondary unit is synchronizing settings or firmware with the Primary. If the change in the settings has been significant, the Secondary unit will synchronize the full configuration file and will reboot.
- ERROR – Indicates that the Secondary unit has reached an error condition.
- REBOOT – Indicates that the Secondary unit is rebooting.
- NONE – When viewed on the Secondary unit, NONE indicates that HA is not enabled on the Secondary. When viewed on the Primary unit, NONE indicates that the Primary unit is not receiving heartbeats from the Secondary unit.
Related Articles
Categories
- Firewalls > TZ Series > High Availability
- Firewalls > NSa Series > High Availability
- Firewalls > NSsp Series > High Availability
- Firewalls > NSv Series > High Availability
YES
NO