Hi,
Even if control link recovery is NOT enabled, when there is a control link failure secondary node goes into disabled state.
By virtue of control-link-recovery feature, manual reboot of the disabled node is not required. Whenever it detects the control link backup, it automatically reboots the disabled node.
Same thing happens with the data (fab) link failure .. i,e when there is a fab link failure (control link is up) , the secondary node goes into disabled state .
If both control and fab links fail simultaneously , its split-brain scenario !