A Member Node Lost Connection To The Group Leader; A Member Node Lost Connection To All Other Nodes In The Encryption Group - Brocade Communications Systems Brocade 8/12c Administrator's Manual

A member node lost connection to the group leader

AssumeN1, N2 and N3 form an encryption group, and N2 is the group leader node. N3 and N1 are
part of an HA cluster. Assume that N3 lost connection to the group leader node N2 but still
maintains communications with other nodes in the encryption group.
Impact
Failover to N1 does not occur, because the isolated node and the encryption engines' encryption
services continue to function normally. However the disconnect of N3 from the group leader breaks
the HA cluster and failover capability between N3 and N1.
You cannot configure any CryptoTargets, LUN policies, tape pools, or security parameters that
would require communication with the isolated member node. In addition, you cannot start any
re-key operations (auto or manual).
Refer to the section
for more information on which configuration changes are allowed.
Recovery
Restore connectivity between the isolated node and the group leader. No further intervention is
required.
A member node lost connection to all other nodes in the encryption
group
Assume N1, N2 and N3 form an encryption group and N2 is the group leader node. N3 and N1 are
part of an HA cluster. Assume that N3 lost connection with all other nodes in the group. Node N3
finds itself isolated from the encryption group and, following the group leader succession protocol,
elects itself as group leader. This action splits the encryption group into two encryption group
islands. EG1 includes the original encryption group minus the member node N3 that lost
connection to the encryption group. EG2 consists of a single node N3, which functions as the group
leader. Both EG1 and EG2 are in a degraded state.
Impact
•
•
•
•
Fabric OS Encryption Administrator's Guide
53-1002159-03
"Configuration impact of encryption group split or node isolation"
The two encryption group islands keep functioning independently of each other as far as host
I/O encryption traffic is concerned.
Each encryption group registers the missing members as "offline".
The isolation of N3 from the group leader breaks the HA cluster and failover capability between
N3 and N1.
You cannot configure any CryptoTargets, LUN policies, tape pools, or security parameters on
any of the group leaders. This would require communication with the "offline" member nodes.
You cannot start any re-key operations (auto or manual) on any of the nodes. Refer to the
section "Configuration impact of encryption group split or node isolation"
more information on which configuration changes are allowed.
Encryption group merge and split use cases
6
on page 222
on page 222 for
215