Skip to main content
iasadiqbal
iasadiqbal
New Member
December 10, 2024
Question

Fortinet 1101E HA syncronization

  • December 10, 2024
  • 2 replies
  • 1198 views

I have two firewalls of 1101E fortinet. HA has syncronization issue. There are different 15 parameters which are not synchronized with primary how can I cope with this issue?. Same primary firewall when we enable IPsec VPN based policy give error in tunnel interface but via cli not issued 

2 replies

dingjerry_FTNT
Staff
dingjerry_FTNT
Staff
December 10, 2024

Hi @iasadiqbal ,

 

Please use this KB for FGT HA sync issue troubleshooting:

 

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-troubleshoot-HA-synchronization-issue/ta-p/193422

    DPadula
    Staff & Editor
    DPadula
    Staff & Editor
    December 12, 2024

    Hi Iasadiqbal,

     

    Try the procedure sent by my colleague @dingjerry_FTNT first. In case it does not solve the issue.

     

    Download the configuration file of the primary, change the hostname and HA settings. Make sure you disconnect the secondary from the HA cluster before you load the modified configs into the secondary. 

    Once secondary is up and running you can connect it back to the cluster. They should be in sync after that few minutes.

     

    Regards

    DPadula

      Terms & ConditionsAccessibility statement
      Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
      Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
      Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!