(Workflow) Fail over HA Appliance to DR Appliance

Use this procedure in the event of a site disaster at the HA site and if you expect the site to be down for a significant period of time, or if you’ve experienced an onQ Appliance failure and are waiting for a replacement.

If you have a cloud DR Appliance (see About Hybrid Cloud), Quorum can ship you the cloud DR Appliance, replacing it with a new DR instance. This onsite DR Appliance assumes the HA role.

Only an HA Appliance (local) can back up recovery nodes. Because your HA Appliance is unavailable, the DR Appliance (remote) must take on this role; otherwise, your recovery nodes, which are now acting as the protected nodes, will not be backed up.

Therefore, a failover involves the DR Appliance taking on the HA role and running the recovery nodes.

As soon as your local site is available, you must fail back.

To fail over to remote onQ Appliance:

1.	Ensure that the local onQ Appliance is down (powered off) or that protection is off.

When an onQ Appliance boots, protection is automatically off. Protection on an HA Appliance instructs the HA Appliance to perform backups. Given that the HA Appliance (local) still has its role set to HA, protection on that HA Appliance must be off until the failback completes.

2.	Log on to the DR Appliance’s onQ Portal.

3.	Start all the recovery nodes on the DR Appliance (remote onQ Appliance). The boot order must take into account any interdependencies.

4.	If applicable, restore the Oracle database:

•	Back up and restore Oracle 11g database on Linux

•	Back up and restore Oracle 10g+ database on Windows

5.	Add a host entry for each protected node, if you haven’t already done so.

6.	Change the DR Appliance’s role to HA.

The recovery nodes on the remote onQ Appliance become the protected nodes; the remote onQ Appliance backs up these recovery nodes.

7.	Establish a secure connection between the RNs and the DR Appliance. Go to Secure connection to PNs.

v3.8 SP1