Troubleshooting Tip: FortiGate High Availability out-of-sync due to different passwd-time

Description

This article describes a situation where a FortiGate High Availability (HA) cluster is out-of-sync due to different passwd-time settings for local users. The article provides a step-by-step guide to resolve the issue by unsetting the passwd-time for each local user on both FortiGate units.

Scope

FortiGate.

Solution

FortiGate High Availability is showing out-of-sync due to different passwd-time settings.

To resolve the issue, follow the steps below:

1. Run the commands below: 
   
   

config user local
edit <username>
unset passwd-time
end

2. Replace <username> with the actual username.

3. Repeat steps 1-2 for each local user except the guest on both FortiGate units.

4. After unsetting the passwd-time for all local users, run the command 'get system ha status' to verify the HA cluster status.

By following these steps, the FortiGate HA cluster should now be in-sync, and the issue should be resolved.