[mofraw]

STONITH is designed for critical failure so you don't end up with a split-brain situation, which is far worse than a dead node. STONITH is a good thing. The problem here is more than cluster wasn't configure to survive a catastrophic switching failure.

[el_cuadrado]

Yep, right - fencing solution that relies on the network to stop the service. How could that possibly fail?