FortiNAC
NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.
lfrancelj
Staff
Staff
Article Id 196102

Description

Upgrade attempt fails with error 'must be run from primary'. 
 
'Error: This command only runs on the primary control server'.
 
Affects L2 HA pairs with Shared IP (VIP).


Scope
Version: 8.7.6,  8.8.2, potentially 8.8.1

Solution
Workaround:  Contact Support for assistance.

Solution: Addressed in versions 8.7.7, 8.8.3 and 9.1.

Workaround:  
    1) Login to CLI as root.
    2) Edit /bsc/campusMgr/bin/getIPAddr.

    Change.

        /sbin/ip addr show "$ETH" | sed -n 's/^\s\+inet \(.*\)\/.*/\1/p'

    To

        /sbin/ip addr show "$ETH" | sed -n 's/^\s\+inet \(.*\)\/.*/\1/p' | head -1

    3) Save changes.
    4) Repeat steps 1-3 for each appliance to be upgraded.
    5) Run the upgrade.
    6) Once upgrade is complete, review the getIPAddr script again. If the line has reverted back to:

        /sbin/ip addr show "$ETH" | sed -n 's/^\s\+inet \(.*\)\/.*/\1/p'

    Then modify the file as before (steps 2-3).  This will prevent the next upgrade from failing.


Contributors