FortiAP
FortiAP devices are thin wireless access points (AP) supporting the latest Wi-Fi technologies (multi-user MIMO 802.11ac Wave 1 and Wave 2, 4x4), as well as 802.11n, 802.11AX , and the demand for plug and play deployment.
sachitdas_FTNT
Article Id 378495
Description This article describes how to verify from the FortiAP whether the FortiGate WiFi Controller 1+1 fast failover is functioning correctly.
Scope FortiAP, FortiGate v7.2.x and above.
Solution

Refer 1+1 fast failover configuration using the below link: FortiGate WiFi controller 1+1 fast failover example

 

FortiAP will show 'run' on primary FortiGate and 'run-standby' on Secondary FortiGate.

 

Commands to check on FortiAP:

 

FortiAP# cw_diag -c ha

Current AC: 192.168.20.1:5246 pri 1

WC fast failover AC mode : 2

WC fast failover peer cnt: 1

Discovered AC list:

    ip=192.168.20.2 allow=1 pri=2 dtls=3 wtp=0/4096 sta=0/65535

    ip=192.168.20.1 allow=1 pri=1 dtls=3 wtp=3/4096 sta=0/65535

 

FortiAP# cw_diag -c acs

 

ACS 0 info

    wcha info            : mode=2 max=10 wait=10 peer_cnt=1

    acPri                : 1

    peer-00              : FG3K2D3Z1580xxxx ip=192.168.20.2:5246 pri=2 pstate=1

    fsm-state            : RUN 3584

    ac-ip-addr           : 192.168.20.1:5246,5247        BROADCAST

    ac-name              : FG1K5D3I1580xxxx

 

ACS 1 info

    wcha info            : mode=2 max=10 wait=10 peer_cnt=1

    acPri                : 2

    peer-00              : FG1K5D3I1580xxxx ip=192.168.20.1:5246 pri=1 pstate=1

    fsm-state            : RUN_STANDBY 711

    ac-ip-addr           : 192.168.20.2:5246,5247        BROADCAST

    ac-name              : FG3K2D3Z1580xxxx

 

AC candidate info:

   AC-00 192.168.20.2:5246 2 available 1 score 696310.00 dtlsPolicy clear  allow 1 skip 0 until 0 curr 4438

   AC-01 192.168.20.1:5246 1 available 1 score 656671.31 dtlsPolicy clear  allow 1 skip 0 until 0 curr 4438

 

FortiAP# kinfo

 

Ctrl Sess: ac=192.168.20.1:5246 Mesh Ether Type: 0x2233

Data Sess: ac=192.168.20.1:5247 wtp=192.168.20.13:52744 ether_mode=Ether II sec=0 skip_cwol=0

 

After the failover, the control and data sessions should move to the secondary FortiGate, and the output of the command 'kinfo' should show 'ac=192.168.20.2'.