FortiAuthenticator
FortiAuthenticator provides centralized authentication services for the Fortinet Security Fabric including multi-factor authentication, single sign-on services, certificate management, and guest management.
jcastellanos
Staff
Staff
Article Id 384339

 

Description This article describes how to diagnose the default route removed from the route table after an upgrade in an HA A-P Topology.
Scope FortiAuthenticator HA A-P v6.6.2.
Solution

Admin will notice the default route that appears in the config, it is not installed in the route table:

 

3-static route cli.png

 

4-netlink cuando no existe la ruta.png

 

After reviewing the section config system ha, it is possible to see the same gateway configured as the default route.

 

2-ha config.png

 

To fix the issue remove the ns-gw in the config system ha section:

 

6-unset gateway.png


The Default Gateway(ns-gw) setting is required if the HA management port has a different default gateway than the one specified in the static routes.


After removing the ns-gw the default route is installed in the route table:

 

7-route installed.png