Symptom

When using Clustering feature with Adaptive Security Appliances (ASA), the cluster master command should not be used to transition the role of the cluster Master unit to a different member in the most seamless fashion. Due to internal architecture, the cluster will be unable to guarantee preservation of the connections that pertain to centralized features unless the old Master unit is removed from the cluster first. Hence, it is recommended to disable Clustering on the Master unit and thus briefly remove it from the cluster in order to transition the Master role to another member in the most seamless way. While some impact is always expected on cluster unit removal, this process allows to minimize such impact for the centralized connections. This defect is filed to add an appropriate note to ASA Configuration Guides and Command References.

Conditions

Using Clustering and attempting to transition the cluster Master role to a different unit.

Workaround

Use the no enable command under the cluster group configuration on the Master unit in order to transition this role to another member.

Further Problem Description