 | ||
| About jeopardy | ||
|---|---|---|
| Prev | About cluster membership and data protection without I/O fencing | Next |
In all cases, when LLT on a system no longer receives heartbeat messages from another system on any of the configured LLT interfaces, GAB reports a change in membership.
When a system has only one interconnect link remaining to the cluster, GAB can no longer reliably discriminate between loss of a system and loss of the network. The reliability of the system's membership is considered at risk. A special membership category takes effect in this situation, called a jeopardy membership. This provides the best possible split-brain protection without membership arbitration and SCSI-3 capable devices.
When a system is placed in jeopardy membership status, two actions occur if the system loses the last interconnect link:
VCS places service groups running on the system in autodisabled state. A service group in autodisabled state may failover on a resource or group fault, but cannot fail over on a system fault until the autodisabled flag is manually cleared by the administrator.
VCS operates the system as a single system cluster. Other systems in the cluster are partitioned off in a separate cluster membership.