Skip to main content
ss99
ss99
New Member
December 10, 2025
Question

FortiGate A-P HA cluster with OSPF between VDOMs reduce failover time

  • December 10, 2025
  • 3 replies
  • 403 views

I have setup a A-P HA cluster with VDOMs enabled.

 
 

image.png

the root VDOM works as the router between the other VDOMs. The routes of the networks of each VDOMs are being distributed over OSPF.

After a HA failover, it takes around 30 seconds (default value for OSPF), so there is no seamless failover. 
Would the OSPF graceful restart (https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-FortiGate-HA-and-OSPF-graceful-restart/ta-p/189556 ) work in this scenario, as there is not really an external peer?

 

Has anyone done a similar setup?

 

3 replies

Jean-Philippe_P
Staff & Editor
Jean-Philippe_P
Staff & Editor
December 14, 2025

Hello ss99, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Jean-Philippe - Fortinet Community Team
sjoshi
Staff
sjoshi
Staff
December 15, 2025

hi @ss99 ,

 

Graceful restart can be helpful.

may refer below article for more information:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-FortiGate-HA-and-OSPF-graceful-restart/ta-p/189556

Thanks, Salon
    AEK
    SuperUser
    AEK
    SuperUser
    December 15, 2025

    I didn't test it between vdoms of the same ha cluster but I theoretically I don't see any reason why it wouldn't work.

    You still need to test it in order to confirm. 

    AEK
      Terms & ConditionsAccessibility statement
      Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
      Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!