| Description | This article describes how to verify from the FortiAP whether the FortiGate WiFi Controller 1+1 fast failover is functioning correctly. |
| Scope | FortiAP, FortiGate v7.2.x and above. |
| Solution |
Refer 1+1 fast failover configuration using the below link: FortiGate WiFi controller 1+1 fast failover example
FortiAP will show 'run' on primary FortiGate and 'run-standby' on Secondary FortiGate.
Commands to check on FortiAP:
FortiAP# cw_diag -c ha Current AC: 192.168.20.1:5246 pri 1 WC fast failover AC mode : 2 WC fast failover peer cnt: 1 Discovered AC list: ip=192.168.20.2 allow=1 pri=2 dtls=3 wtp=0/4096 sta=0/65535 ip=192.168.20.1 allow=1 pri=1 dtls=3 wtp=3/4096 sta=0/65535
FortiAP# cw_diag -c acs
ACS 0 info wcha info : mode=2 max=10 wait=10 peer_cnt=1 acPri : 1 peer-00 : FG3K2D3Z1580xxxx ip=192.168.20.2:5246 pri=2 pstate=1 fsm-state : RUN 3584 ac-ip-addr : 192.168.20.1:5246,5247 BROADCAST ac-name : FG1K5D3I1580xxxx
ACS 1 info wcha info : mode=2 max=10 wait=10 peer_cnt=1 acPri : 2 peer-00 : FG1K5D3I1580xxxx ip=192.168.20.1:5246 pri=1 pstate=1 fsm-state : RUN_STANDBY 711 ac-ip-addr : 192.168.20.2:5246,5247 BROADCAST ac-name : FG3K2D3Z1580xxxx
AC candidate info: AC-00 192.168.20.2:5246 2 available 1 score 696310.00 dtlsPolicy clear allow 1 skip 0 until 0 curr 4438 AC-01 192.168.20.1:5246 1 available 1 score 656671.31 dtlsPolicy clear allow 1 skip 0 until 0 curr 4438
FortiAP# kinfo
Ctrl Sess: ac=192.168.20.1:5246 Mesh Ether Type: 0x2233 Data Sess: ac=192.168.20.1:5247 wtp=192.168.20.13:52744 ether_mode=Ether II sec=0 skip_cwol=0
After the failover, the control and data sessions should move to the secondary FortiGate, and the output of the command 'kinfo' should show 'ac=192.168.20.2'. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.