Netscaler (in HA) Command line Upgrade or Downgrade Procedure

13 Sep

Follow these 9 steps to perform a Command Line Upgrade or Downgrade of your NetScaler HA config.

1. Uploading your build

Download the required NetScaler build from the download section of the MyCitrix site to your computer. Connect to your NetScaler(s) with WinSCP or another SSH File transfer tool and upload the file to the /var/nsinstall folder. Do create a folder for the build, so it will be something like /var/nsinstall/build-11.1-xx.xx_nc

2. Save your NSCONFIG File

Download the ns.conf from the /nsconfig folder and make a backup. Make sure to check the /nsconfig folder for previous versions. When you up- or downgraded your NetScalers in the past it’s possible that there are previous versions named like ‘ns.conf.NS10.0’ . To be sure this config will not be used after an up- or downgrade remove these files if present (download and backup them, but make sure they’re not in that location).

3. Configure the Primary node

The first node to be upgraded is the SECONDARY node. During the upgrade process no sync or propagation must take place. !! Note that during the first failover active sessions will be disconnected !! The risc of leaving sync and prop enabled is that a wrong configfile will be synched.

Procedure:
Log on with Putty on the VIP address of the NetScaler. Disable sync and prop and make sure the node stays primary with the following command:

set ha node -haprop disABLED -hasync disABLED -hastatus staypRIMARY

Determine the Secondary node with the following command:

sh ha node

4. Upgrade or Downgrade of the Secondary Node

Procedure:
Log on with Putty on the VIP address of the SECONDARY Node. Run the following command sequence:

shell
cd /var/nsinstall/build-11.1-xx.xx_nc
tar xzvf buildfile.tgz

rm buildfile.tgz
installns

Do NOT load a different config file. After installation reboot the NetScaler

5. First Failover

!! As mentioned before active ICA sessions will be disconnected !!

Procedure:
Log on with Putty on the IP adress of the PRIMARY node. Run the following commands:

set ha node -hastatus enabled
force ha failover
sh ha node
(check if the failover succeeded)

With this failover the Secondary Node became the Primary node

6. Check your config !!!

Log on to the management console of the node that is up- or downgraded. Check the configuration:
– Check your licenses
– Check your SSL Certificates
– Check if the loadbalancers are up and running
– Check if the Access Gateway Virtual servers are up and running
– Check if you can access your sites, start applications etc. etc. etc.

Make sure you do a proper check before you continue with the next step.

7. Re-enable HA

Procedure:
Log on with Putty on the IP adress of the PRIMARY node. Run the following commands:

set ha node -haprop enABLED -hasync enABLED
save ns conf

8. Upgrade or Downgrade Secondary Node (the remaining node)

Procedure:Log on with Putty on the VIP address of the SECONDARY Node. Run the following command sequence:

shell
cd /var/nsinstall/build-11.1-xx.xx_nc
tar xzvf buildfile.tgz
rm buildfile.tgz
installns

Do NOT load a different config file. After installation reboot the NetScaler

9. Final Failover

Procedure:
Log on with Putty on the IP adress of the PRIMARY node (or on the VIP address). Run the following command:

force ha failover

The failover must succeed without loss of connectivity. If it does your done. Approx. time to complete: 30 mins if all goes well!

Comments

Leave a Reply