Anyone experiencing issues with setting up HA on N...
# citrix-netscaler
c
Anyone experiencing issues with setting up HA on NS14.1 29.63? VPX on ESXi at a customer. Clean deployment from template (no upgrade), after initial setup added the other node (in the same subnet). The HA join itself goes ok and then the sync fails. (Secondary gives error: Unable to connect to primary, please check the network connectivity from secondary to primary). Doesn't matter if I do it by CLI or GUI. So tested it on my own lab setup (single NUC with ESXi), exact same thing. Anyone experiencing the same with this version?
Tried NS14.1 25.56, no problem at all.
j
Are these licensed or freemium? I know the freemium had a bug with cert key size that requires a fix to get those cert pairs working.
c
Still Freemium. And I tried it without setting the RPC passwords before adding the ha node and with setting the RPC passwords before adding. Same result in both.
j
Probably part of that same cert issue. I think there is a private patch, but should be addressed in the next version. https://community.citrix.com/forums/topic/253174-mutilated-tls-support-after-update-141-2963-on-freemium-appliances/
c
Ah, thanks. I will stay away from that version for now then.
r
HA in the new Fremium is broken.
j
Upgrade to 29.65 and your problems are solved.
r
Negative. I can do SSL, but HA still won’t sync.
j
Oh is it?
dang
@Richard Faulkner what isn't working on the sync
just added a second node to my freemium and it synced just fine on 29.65
r
πŸ˜•
I'll try it again tomorrow.
c
Tested 29.65 in my lab. So first deployed 2x 29.63 and setup a HA pair (which failed with the earlier mentioned error). Upgraded both appliances to 29.65 which removed the HA setup. Joined them again and works accordingly.
πŸ‘ 1
r
Ok, after several run-throughs of changing the RPC password, they finally decided it was ok to synchronize. I suspect since I tried first before 29.65 something got out of whack. I am now working HA on Fremium.
🚨 1
πŸ‘ 1
j
So basically user error? πŸ€”πŸ‘€πŸ€£πŸ”«β€οΈ
r
🀣 yes, trying out the first version of a new feature is definitely a mistake.
πŸ™Œ 1
h
has the 29.65 been pulled?
j
Are you looking in the right place?
c
It's not been pulled, but it's only available as upgrade. Not as OVF file.
h
image.png
checking it live
j
Go to virtual appliances
c
image.png
j
Then at the bottom
h
oh ffs
thanks
why only express.. ok won't ask
⏰
j
Because 29.65 = 29.63 + license fix for VPX Express
h
πŸ™ˆ
and what happens when applying a license then?
j
It will work as expected.
29.63 has the new VPX Express Premium 20Mbps license. However, it didn't work and left you in an unusable state (especially given that all crypto was broken). So 29.95 fixes that issue, so you actually get the VPX Express Premium 20Mbps. It was not announced as a general build, because customers were just done upgrading to 29.63. And since it has no impact on all commercially licensed instances, it was tucked away a bit. So everybody running a licensed 29.63 is not required to update to 29.65.
βœ… 1