Skip to main content
adecottignies_FTNT
Staff
Staff
December 17, 2024

Technical Tip: High Availability and manual failover on FortiGate 7000 devices

  • December 17, 2024
  • 0 replies
  • 1411 views
Description This article describes how to manually trigger a failover for a FortiGate 7000 cluster.
Scope FortiGate 7000.
Solution

FortiGate-7000 devices support High availability in Active-Passive mode with only two devices.
Depending on the HA configuration, changing the priority or resetting the HA uptime triggers a failover.

To check the current HA configuration through CLI:

 

config global
show full-configuration system ha

Priority, override, and monitor are the important elements to look at.


During the primary unit election in the 7000 cluster, if override is disabled, the following criteria are considered:

Override Disabled: Any Active FPMs -> Number of active FIM -> Connected Monitored Ports -> Number of Active FPMs -> HA uptime -> Priority -> Serial Number.

While the number of connected monitor ports, and Active FPMs / FIMs are identical, it is the HA uptime that acts as a tiebreak.

To force a failover, it is necessary to reset the ha uptime on the current primary:

 

config global
diag sys ha reset-uptime

 

If override is enabled the following criteria are considered:


Override Enabled: Any Active FPMs -> Number of active FIM -> Connected Monitored Ports -> Number of Active FPMs -> Priority -> HA uptime -> Serial Number.


To force a failover, it is necessary to change the priority:

 

config global
    config system ha
        set priority <priority number>


The unit with the highest priority will become primary.


Related article:
Technical Tip: Understanding the HA uptime for Chassis based device
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!