FortiAp takes a long time to connect to Fortigate in HA

Question

Good afternoon!I am trying to connect two FortiGate 40F in HA and two different ISPs with a FortiAP 221e on the internal network. The architecture of the formed network is as follows:   the connections with the ISPs through the ISPs work correctly and the connection in HA also works as it should (I make the wired connection from the internal Switch to a computer, I run ping to google and when I disconnect the FG that is working as primary , only one packet is lost, making the switch from primary to secondary correctly). The problem is that when I perform such disconnection from the primary FG, the FortiAP goes offline and takes a long time to reconnect, leading to all client connections to the AP being disconnected.I would appreciate if someone could guide me on the following:Why will there be such a delay in reconnection to the secondary FG?Is this delay because I am using TPLinks Switches?Is there any particular configuration for the FortiAP in this situation?Thank you very much in advance for everyone's attention and contribution.HORACIO FUENTES

jhussain_FTNT · Accepted Answer

Hi,

Please note that normally when your are doing failover, the FortiAP will try to discover new controller only when the retrasnmit count (default is 3) configured on the Fortigate fails. It is normally it will take 2 -3 min for the AP to join the new controller.

Kindly let us known how much time it is taking to FortiAP joins to new controller. Does both the Fortigate are in sync, when you do the HA failover.

You can fine tune to below keep alive settings on the Fortigate.

#config wireless-controller global
#set max-retransmit 3
#end
# config wireless-controller timers
(timers) # set echo-interval 60 (sec)
(timers) # end

Regards

Jamal

hfuentes87 · Answer

Perfect! Indeed, both FG are synchronized, so I am going to review that configuration that you tell me to try to reduce reconnection times.
Thank you in advance for your response, it has been very kind.

Horacio

Sign up

Login with SSO

Login to the community

Login with SSO