Staff

Troubleshooting Tip: Default route lost after the upgrade FortiAuthenticator from v6.3.3 to v6.6.2

Description

This article describes how to diagnose the default route removed from the route table after an upgrade in an HA A-P Topology.

Scope

FortiAuthenticator HA A-P v6.6.2.

Solution

Admin will notice the default route that appears in the config, it is not installed in the route table:

3-static route cli.png

4-netlink cuando no existe la ruta.png

After reviewing the section config system ha, it is possible to see the same gateway configured as the default route.

2-ha config.png

To fix the issue, remove the ns-gw in the 'config system ha' section:

6-unset gateway.png

The Default Gateway(ns-gw) setting is required if the HA management port has a different default gateway than the one specified in the static routes.

After removing the ns-gw the default route is installed in the route table:

7-route installed.png

Sign up