We have 5 pairs of DSS V6 servers running in our environment.
We didnt`t have a crash or failure of our servers but whenever we make an update of either DSS or BIOS / Firmware of the servers we first do the update on the secondary and then reboot it and the primary is running as stand-alone with the virtual-IP.
When the secondary is back up we do sync of the iSCSI Volumes and then a manual failover to the secondary and then update the primary and do the reboot of the primary. The secondary will run with virtual IP then.
When the primary is back up we do a resync of the volumes and then a manual failback and then the cluster will be running again under its virtual ip.