This article describes how to failover traffic group to the other node in High Availability (HA) Active-Active VRRP mode.
It may be necessary to preconfigure the HA Active-Active VRRP setup and refer to the documentation at the end of this article for more information on configuring the HA Active-Active VRRP setup.
For this article example, 2 traffic groups are set up at System -> Traffic Group as below:
It is possible to see this setup reflected on the HA page at System -> High Availability.
Currently, the 'traffic-group-1'' Active Device Node is Node 1, and the 'traffic-group-2' Active Device Node is Node 2.
It is possible to have a requirement to failover the traffic-group-2 to its Next Device Node (standby) which is Node 1.
Issue below CLI command for the failover (the CLI command can be issued from any Active node):
execute ha force standby traffic-group <specify the respective traffic group>
After the failover, the Active Device Node for the 'traffic-group-2' is now Node 1.
Refer to the below documentation for more information on the HA Active-Active VRRP setup:
Deploying an active-active-VRRP cluster
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.