Staff

Technical Tip: Recovering standby FortiAuthenticator VM after storage failure

Description

This article describes the procedure to recover a standby FortiAuthenticator virtual machine after a storage failure.

In this scenario, recovery can be performed using the same IP address from the faulty virtual machine.

Scope

FortiAuthenticator.

Solution

Back up the configuration on the primary node.
Verify that the primary node shows the secondary node as not reachable. Note down the 'External IP'.
Deploy a new FortiAuthenticator virtual machine.
Configure the minimum management settings:
a. Hostname.
b. Management IP address.
c. Default route.
d. Upload the license (the same license that was used for faulty FortiAuthenticator).
After applying the license, the node will reboot.
On the newly deployed FortiAuthenticator, enable HA and configure the same cluster IP address under HA settings as on the faulty node. Set the priority to Low.

Sign up