Updating a CARP HA ClusterRunning a redundant Active/Passive cluster leads to the expectation to have zero downtime. To keep the downtime at a minimum when running updates just follow these steps: Update your secondary unit and wait until it is online again On your primary unit go to Interfaces ‣ Virtual IPs ‣ Status and click Enter Persistent CARP Maintenance Mode You secondary unit is now MASTER, check if all services like DHCP, VPN, NAT are working correctly If you ensured the update was fine, update your primary unit and hit Leave Persistent CARP Maintenance ModeWith these steps you will not lose too many packets and your existing connection will be transferred as well. Also note that entering persistent mode survives a reboot.