Description |
This article describes how to correct an out-of-sync HA cluster by modifying the primary unit configuration file and restoring it to the secondary unit.
Related article: Technical Tip: Troubleshooting a checksum mismatch in a FortiGate HA cluster
|
Scope |
FortiGate |
Solution |
Instead of trying to correct each configuration item that is out of sync individually which could be very time-consuming depending on the number of items out of sync, do the following:
config system global set hostname <hostname> <----- Hostname will be shown here. end
config system ha set priority <priority value> <----- The HA priority value will be shown here. end
This can be done by first verifying the interface being used for HA management by searching for the following commands in the configuration file.
config system ha config ha-mgmt-interface set interface <interface name> <----- The interface name will be shown here. end
Once the ha management interface is known, it is then possible to change the IP by searching for the following commands in the configuration file.
config system interface edit <ha management interface name> set ip x.x.x.x <----- IP address and subnet will be shown here. end
This can be done by connecting a laptop to one of the interfaces ensuring that the laptop is on the same subnet as the interface wanted to connect to. Once the laptop is on the same subnet, it is possible to access the GUI using the ip address of the interface connected to it.
Note: If the HA Pair is still out of sync after restoring the identical configuration file to the secondary device, it is possible to resolve the issue by running the following commands (run on both units):
diagnose sys ha checksum recalculate
Or, more specific:
diagnose sys ha checksum recalculate [<your_vdom_name> | global] |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.