Skip to main content
lestopace
Staff
Staff
October 11, 2022

Technical Tip: How to configure HA failover delay for monitored ports

  • October 11, 2022
  • 0 replies
  • 9230 views
Description This article describes how to configure HA failover delay when monitored interface go down.
Scope FortiGate 7.0 and above.
Solution

In the following example, the failover-hold-time has been set to 30 seconds.

The value can be set from 0 to 300.

 

# config system ha

    set failover-hold-time <integer>

end

 

Results.

Before port3 at Bezza-kvm36 go down:

 

lestopace_0-1662715647102.png

 

 After port3 at Bezza-kvm36 went down:

 

lestopace_2-1662700652433.png

 

Fail-over occurred after 30 seconds:

 

lestopace_0-1662700531171.png

 

Note.

The same command is also the solution when there is a premature failback after a monitored link goes down (i.e. when a switch connected to a particular unit was rebooted or its interface flapped).

 

Premature fail-back problem:

A second after FGVM020000-----7 became the master due to port3 being down, FGVM020000-----2 became master again.

 

lestopace_4-1662701152375.png

 

Adding failover-hold-timewill avoid flips caused by monitor interface failure.

 

 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.