Troubleshooting Tip: How to Change cluster Active-Active to Active-Pasive

Hardware Summary:

#######################################
FortiGate-1
FG100ETK11111111
Primary
Priority 135
FortiGate-100E v7.2.7,build1577,240131 (GA.M
Override Enable
Mode: Active - Active

FortiGate-2
FG100ETK22222222
Secondary
Priority 130
FortiGate-100E v7.2.7,build1577,240131 (GA.M
Override Enable
Mode: Active-Active
#######################################

Preparation:

1. A technician must be on-site to be able to connect to the equipment.
2. Make a full backup of the Primary (FortiGate-1).

1. Make a full backup of the Primary FortiGate, FortiGate-1 (FG100ETK11111111).
2. Physically disconnect (all cables) the Secondary FortiGate 'FortiGate-2' from the cluster. In this case, the traffic will be passed through FortiGate-1 (Primary).
3. Connect via ssh (CLI) to the FortiGate-1 (Primary) and do the following:

config system ha
    set mode a-p

end

4. Connect via console to the FortiGate-2 (Secondary) and do the following:

config system ha

    set mode a-p

end
execute reboot

5. After rebooting, physically connect FortiGate-2 (Secondary) to the cluster and wait for the FortiGates to synchronize.
6. The traffic continues passing through FortiGate-1 (Active).
   
7. After the synchronization occurs, proceed with a backup and save it for future use.