show ha status (for Network Security appliances)

Displays the current status of a Network Security appliance that is a member of a Network Security High Availability (HA) pair.

Syntax

show ha status

Parameters

None

Output fields

The following table describes the output fields for this command.

Field	Description
High Availability	Enabled—The appliance is in the HA pair. Disabled—The appliance has never been added to the pair or has been removed from it.
HA Cluster Name	The name of the HA pair.
HA Peer Name	The hostname of the other Network Security appliance in the pair.
HA Peer ID	The unique ID of the other appliance in the pair.
HA Status	The state of the pair: Control port link is down—The control port link is down. If the cable is properly connected, this condition usually clears with no intervention. Data port link is down—The data port link is down. If the cable is properly connected, this condition usually clears with no intervention. Heartbeat not received—Heartbeat messages were not exchanged. This condition usually clears with no intervention. Data port connectivity not connected properly—The data port is not healthy or is not connected to the peer appliance. HA pair is not compatible—The appliances are not running the same version of the Network Security software image. HA model is not compatible—The Network Security appliance hardware models do not match. HA pair is not compatible due to license check—A restricted license is active on both appliances. (A full license must be active on at least one appliance.) HA peer verification failed—The peer verification failed for one or more of the following reasons: the appliances do not have an established connection between them, the appliance hardware models do not match, the Network Security software images do not match, or a license check failed. Init Check failed—The initial handshake failed, so the appliances cannot communicate with each other. This status usually clears with no intervention.
HA Status Description	A brief description of the state of the pair.
HA License	Full or Restricted—A full license must be installed on one of the appliances in the pair. A restricted or a full license can be installed on the other appliance.
HA Grace Period Status	Disabled if the appliance with the restricted license has already been added to the pair. Enabled if the restricted appliance has not been added to the pair. The grace period is 90 days. If the restricted appliance is not added to the pair before the grace period ends, that appliance will lose its detection capabilities.
HA Grace Period Days Left	The number of days remaining before the grace period ends. This value is reduced by one for each day the appliance is not added to the pair. (If the HA Grace Period Status value is Disabled, the value of this field is always 90.)

Examples

The following example shows the status of the nx-1 appliance. This appliance is the member with the full Network Security product license.

nx-1 # show ha status
        High Availability:          Enabled
        HA Cluster Name:            Acme_NXHA
        HA Peer Name:               nx-2
        HA Peer ID:                 1XXXXXXXXXXX
        HA Status:                  Good
        HA Status Description:      OK
        HA License:                 Full

The following example shows the status of the nx-2 appliance. This appliance is the member with the restricted Network Security product license.

nx-2 # show ha status
        High Availability:          Enabled
        HA Cluster Name:            Acme_NXHA
        HA Peer Name:               nx-1
        HA Peer ID:                 2XXXXXXXXXXX
        HA Status:                  Good
        HA Status Description:      OK
        HA License:                 Restricted
        HA Grace Period Status:     Disabled
        HA Grace Period Days Left:  90

The following example shows the status of the nx-2 appliance after it was removed from the Network Security HA pair. Removing it from the pair causes the restricted license grace period to be enabled.

nx-2 # show ha status
High Availability: Disabled

The following example shows the status of the nx-1 appliance while its peer is rebooting. While nx-2 is rebooting, the status of nx-1 is Init Check failed.

nx-1 # show ha status
       High Availability:            Enabled
       HA Cluster Name:              Acme_NXHA
       HA Peer Name:                 nx-2
       HA Peer ID:                   1XXXXXXXXXXX
       HA Status:                    Degraded
       HA Status Description:        Init Check failed
       HA License:                   Full

User role

Admin, Monitor, or Analyst

Command mode

Enable

Supported appliances

This command is supported on the following appliances running the specified releases or later:

Network Security: Release 7.8.0

Note
For more information about Network Security HA, see the Network Security High Availability Guide.