Skip to main content
VDOM001
VDOM001
Explorer
July 8, 2026
Question

I can't change the HA's Device Priority.

  • July 8, 2026
  • 4 replies
  • 106 views

Regarding a FortiGate system configured in an active/standby high-availability (HA) setup,
we initially set the Device Priority value for Unit 1 to 200 and the Device Priority value for Unit 2 to 128 (the default).
However, even though we hadn’t made any changes, the priority value on the standby unit had changed to 200, the same as the active unit. We attempted to manually change the priority value on the standby unit back to its original value of 128, but an error message stating “The entered value is incorrect” appeared, and we were unable to make the change.
The system recognizes the active/standby configuration and no abnormalities are apparent in the HA setup, but what is the cause and how should we proceed?

    4 replies

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    July 8, 2026

    Share us config in cli under “config system ha”. I’m assuming you have “set override enable”.

    Toshi

      VDOM001
      VDOM001Author
      Explorer
      July 8, 2026

      ​@Toshi_Esumi 

      I checked the HA settings, but I haven't configured “set override enable.” Is it not possible to change the priority unless override is enabled?

      I'll share the other settings separately.

        Toshi_Esumi
        SuperUser
        Toshi_Esumi
        SuperUser
        July 8, 2026

        To me, it should be possible. But without override enabled, there is no real meaning to have different priorities on two FGTs. I thought that might be the reason the FGTs, or FMG if they’re managed by FMG, thought the value should be the same and changed from your setting. Because if the primary selection is decided by the uptime instead of the priority values, why do you want to have different values? That’s why I asked.

        Try enabling it then wait a few days if it would stick. 


        Toshi

          sjoshi
          Staff
          sjoshi
          Staff
          July 8, 2026

          Hi ​@VDOM001 

           

          HA priority should not get sync.

          Can you share show sys ha from both devices.

          Can you try changing priority from GUI for sec device > System > HA and select the sec device and change the priority

          Thanks, Salon
            VDOM001
            VDOM001Author
            Explorer
            July 9, 2026

            ​@Toshi_Esumi  ​@sjoshi 

            I am sharing the HA system configuration.
            The values in the partially masked sections are identical on both the primary and secondary systems.
            ・Changing the priority on the active system results in an error.
            ・Changing the priority while the HA link is disconnected and the system is in standalone mode also results in an error.
            ・Changing the HA priority for the standby side on the active system does not result in an error, but the priority remains unchanged.

             

            In the past, when I restored the active node while the HA configuration was in place, it appears that the standby node’s hostname and IP address were synchronized. Could this be the cause?

             

            ■Primary
            config system ha
                set group-name "XXXXX"
                set mode a-p
                set hbdev "ha" X "portX" X 
                set session-pickup enable
                set ha-mgmt-status enable
                config ha-mgmt-interfaces
                    edit 1
                        set interface "portX"
                        set gateway X.X.X.X
                    next
                end
                set override disable
                set priority 200
                set monitor "portX" "portX" 
                set ha-direct enable

             

            ■Secondary
            config system ha
                set group-name "XXXXX"
                set mode a-p
                set hbdev "ha" X "portX" X 
                set session-pickup enable
                set ha-mgmt-status enable
                config ha-mgmt-interfaces
                    edit 1
                        set interface "portX"
                        set gateway X.X.X.X
                    next
                end
                set override disable
                set priority 200
                set monitor "portX" "portX" 
                set ha-direct enable

              funkylicious
              SuperUser
              funkylicious
              SuperUser
              July 9, 2026

              hi,

              can you also share the output of the error when you try to set the priority ?

              also, what version of FortiOS are you running ?

              "jack of all trades, master of none"
                VDOM001
                VDOM001Author
                Explorer
                July 9, 2026

                ​@funkylicious 

                When making changes via the GUI:

                The value you entered is incorrect.
                Node_check_objectfail for hbdev ha
                Node_check_objectfail for hbdev portXX
                Objectcheck operatorerror-651 
                discard the setting

                 

                When making changes via the CLI:

                Command fail.Return code-651

                 

                The OS version is v7.6.6.

                  funkylicious
                  SuperUser
                  funkylicious
                  SuperUser
                  July 10, 2026

                  interesting that in the GUI it shows you something extra for the links that are used for ha communication.

                  what do you get for

                  diagnose sys cmdb refcnt show system.interface.name portXX

                  diagnose sys cmdb refcnt show system.interface.name ha

                  "jack of all trades, master of none"
                    Terms & ConditionsAccessibility statement