Skip to main content
AEK
SuperUser
SuperUser
August 2, 2023
Solved

VRRP failover delay

Hello

VRRP on FortiGate fails over in a minimum of 3s and I couldn't find a way to reduce it more.

Tried to use VRRP v3 but I got the same.

By the way VRRP v3 timers should be configurable in millisecond but on FortiGate it is still in seconds.

Any idea on how to reduce failover time to 1 or 2s?

srajeswaran
Staff
August 2, 2023

As of now VRRP timers in milliseconds is not available in Fortigate, but the good news is our engineering team is already working on this request and we can expect this feature in upcoming releases.

3 replies

Esteemed Contributor III
August 2, 2023

Hi @AEK 

 

On FGT default VRRP advertisement messages are sent once every second. The frequency can be changed with the adv-interval option to change the frequency of sending these messages (1 - 255 seconds). These frequency messages are in seconds.

The adv-interval also affects the period of time that a backup VRRP router waits before assuming the primary router has failed. The waiting period is three times the adv-interval. For example, if the adv-interval is set to 1, then the backup router waits for up to 3 seconds to receive a VRRP advertisement from the current primary router before taking over the role of the primary router. 

 

I found one article for the active failover using the link-monitor. 

Please check the below link if it helps you:-

https://community.fortinet.com/t5/FortiGate/Technical-Tip-VRRP-Active-failover-with-link-monitor/ta-p/214419

 

 

Regards

Priyanka

 


- Have you found a solution? Then give your helper a "Kudos" and mark the solution

AEK
SuperUser
AEKAuthor
SuperUser
August 2, 2023

Thanks Priyanka

But actually my concern is how to reduce this fail-over delay below 3 seconds.

This should be doable with VRRP v3 but it seems not the case on FortiGate.

AEK
srajeswaran
Staff
Staff
August 2, 2023

As of now VRRP timers in milliseconds is not available in Fortigate, but the good news is our engineering team is already working on this request and we can expect this feature in upcoming releases.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT