A short note, after enabling cluster firewall if using drbd9, all connection will be lost. Suggestion is to add in Datacenter -> firewall -> ipset, create ipset drbd9, add ip of all drbd9 nodes. Then in rules, create IN, ACCEPT, make sure the interface is correct, destination +drbd9, leave rest...