Skip to main content
kinmun
New Member
June 11, 2019
Question

FG300D HA failover

  • June 11, 2019
  • 9 replies
  • 12473 views

i have a pair of FG300D, recently we noticed that the master is having alot of error message.

my fortiOS is version 5.4.4

 

how do i force/swap the HA failover ? 

so that the slave will now act as the mater 

what is the cli command

i try diagnose sys ha reset-uptime have no effect.

    9 replies

    Philippe_Gagne
    New Member
    June 11, 2019
    Hi, Juste change the priority of the current slave higher than the current master. Default value is 128, put 200 as an example! Role should move to the other member. Regards, Phil
    hubertzw
    New Member
    June 11, 2019

    Hi

    it depends which option you have: 'override disabled' or 'override enabled'. You can check it here:

     

    show system ha

     

    With 'override disabled' (default mode) the order is:

    1) number of monitored interfaces

    2) HA uptime (the difference between peers must be higher than 5 minute to use this one, below 5 minutes is treated as the same value)

    3) priority

    4) serial number

     

    With 'override enabled' :

     

    1) number of monitored interfaces

    2) priority

    3) HA uptime (the difference between peers must be higher than 5 minute to use this one, below 5 minutes is treated as the same value)

    4) serial number

     

    With the 1st option to trigger failover you reset the HA uptime (on the active one) and with the 2nd you must change priority (higher value is preferred).

     

    You should stay with default settings (override disabled). It's more stable version and requires less planning. You may prefer 'override enabled' with virtual-clustering in active-passive mode.

     

     

     

    kinmun
    kinmunAuthor
    New Member
    June 12, 2019

    my show sys ha is below

    override is disable.

     

    IER2_FW01 # show system ha config system ha set group-name "GV-TIER2-FW-HA" set mode a-p set hbdev "mgmt1" 50 "mgmt2" 50 set session-pickup enable set override disable set monitor "port1" "port2" "port3" end

     

    i have set priority for slave to be 200 instead of default of 128 but nothing changed.

    master is still the one with issue.

    do i need to restart the FW??

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!