Skip to main content
keithnet
keithnet
New Member
August 14, 2012
Question

Move HA from Active-Passive to Active-Active

  • August 14, 2012
  • 4 replies
  • 7002 views
Hey, I need to change my HA configuration but can' t seem to find documentation for this. Can I just flip the switch to active active and both units in the HA figure it out? Or do I need to disable HA and reset it up?

    4 replies

    rwpatterson
    rwpatterson
    New Member
    August 14, 2012
    Well, if you disable A-P, then you have 2 firewalls. Simply set them up as A-A, making sure that the primary has the higher priority, or the bogus settings from the backup unit will overwrite the good one.
    Zeihold_von_SSL
    Zeihold_von_SSL
    New Member
    August 14, 2012
    No you can just change the ha config via gui. But you may have a look at the ha guide provided by fortinet: http://docs.fortinet.com/fgt/handbook/40mr3/fortigate-ha-40-mr3.pdf You also may loose connection (a short interrupt) while the cluster changes its state from a-p to a-a. We have done this about 9 moths ago. I don' t rember anything special.
    keithnet
    keithnetAuthor
    New Member
    August 15, 2012
    Excellent. Thank you for the reply!
    emnoc
    emnoc
    New Member
    August 16, 2012
    Just remember in a cluster the HA priority needs to be review. Also keep in mind the priority FW handles all broadcast, icmp and udp traffic. You can add numerous secondareis firewalls into the cluster to distribute load-balancing and other functions. just make sure ; you have redundant HA links and the same model with same code
    Terms & ConditionsAccessibility statement