Skip to main content

Hello,

I am currently testing our PRA failover setup, which uses the DNS Swing method.

Configuration:

Setting Primary site setting Backup site setting
Enable Backup Operations off on
Auto data-sync interval 5 minutes 5 minutes
Bandwidth limiting unlimited  unlimited
Enable Automatic Failover on on
Primary site instance timeout 5 minutes 5 minutes

Below are the test steps and observations:

Test Steps:

1. Both appliances synchronized successfully.
2. Shut down the primary appliance.
3. The load balancer automatically updated the DNS to point to the secondary appliance.
4. After a few minutes, the secondary appliance became the primary.
5. Powered the first appliance back on.
6. The load balancer automatically updated the DNS back to the first appliance.
7. However, after waiting for 10 minutes, the primary role remained with the second appliance.

Question:
Is there a way to automatically have the first appliance reclaim the primary role once it comes back online?

Thank you for your help!

Hey ​@AndyH!

At this time there is not.  The only settings are to check when the Primary appliance is not accessible to Failover.  Once the available IP for the hostname is taken by the backup, it is no longer available without manual intervention.  The Primary appliance does a sanity check to see if the Hostname/IP is available, and if it is not, it won’t take it. 

This would be a Feature request to create a toggle mechanism for the primary to always attempt to take the Hostname/IP when it is alive, but this can potentially cause disruption to day-to-day operations.  As everything connected to the backup, will continue to do so until those connections are severed by a reboot or site restart.  I could see this as a value in some heavily controlled environments though!

For feature requests: You should be able to enter those yourself once logged into the self service portal under the AHA! Okta Tile.  The things we need to know are:

What is the request?
How would you like the request to function?
How would this benefit your company? 
 

***  Be advised, once a feature request is submitted, Beyondtrust does not comment on feature requests, pending features, or the status of the feature in question.  ***

 

Thanks, ​@RKarnitz. 

Reply


Badge Earners

  • BCA: Password Safe
    Tony Forsterhas earned the badge BCA: Password Safe
  • BCIE: Endpoint Privilege Management - Windows
    Angelahas earned the badge BCIE: Endpoint Privilege Management - Windows
  • BCIE: Endpoint Privilege Management - Windows
    Edward Vhas earned the badge BCIE: Endpoint Privilege Management - Windows
  • BCA: Privileged Remote Access
    EArayahas earned the badge BCA: Privileged Remote Access
  • BCA: Password Safe
    EArayahas earned the badge BCA: Password Safe
Show all badges
Terms & ConditionsCookie settings