Skip to main content
opetr_FTNT
Staff
Staff
May 28, 2015

Technical Tip: HA Secondary node is stuck in reload loop

  • May 28, 2015
  • 0 replies
  • 2909 views

Description

 
This article describes how to proceed when the Secondary node is stuck in a reload loop. This problem can occasionally happen after the upgrade and is often caused by an incorrect (impossible) configuration on the Primary unit.
 
Scope
 
FortiMail.


Solution

 

This can usually be solved by disabling HA to stop the reloading of the Secondary unit, and then swapping roles, waiting for sync, and then reverting to the original roles.

  1. On the Primary unit, stop reloading of the secondary by running:

 

config system ha     set mode off end

 

  1. Change roles:

On the Secondary unit (unit B):

 

config system ha     set mode primary end

 

On the Primary unit (unit A):

config system ha     set mode secondary end

 

  1. Wait for synchronization (unit A may reload once), then swap back to the original roles.

On unit B:

 

config system ha     set mode secondary end

 

On unit A:

config system ha     set mode primary end

 

To verify that everything is working correctly, perform a config change on the primary unit and check that it was synchronized correctly on the secondary unit.

For example, create a dummy session profile.

Primary # config profile session     edit test-profile end

 

Then, verify that the setting was correctly transferred to the secondary unit.

Primary # get profile session


== [ session_basic_predefined ]
== [ Outbound_Session ]
== [ Inbound_Session ]
== [ test-profile ]


Secondary # get profile session


== [ session_basic_predefined ]
== [ Outbound_Session ]
== [ Inbound_Session ]
== [ test-profile ]


If switching the roles does not fix the issue (i.e., the secondary unit still keeps reloading), create a ticket with support and provide the following information:

  1. Configuration backup from both units.
  2. The output of the following commands, also from both units:

 

diagnose sys ha show diagnose sys ha show global