FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
kvarada_FTNT
Staff
Staff
Article Id 274081
Description This article describes different options available to trigger an HA failover in the FGCP HA environment to make sure the traffic fails over to the backup FortiGate.
Scope FortiGate.
Solution

In Fortigate HA, the following options exist to test a fail-over:

 

Scenario 1: If override is enabled in the HA settings of both units (primary and secondary), set the HA priority of the primary FortiGate to a lower value than the secondary FortiGate's HA priority.

 

Scenario 2: If override is disabled in the HA settings of both units (primary and secondary), reset the uptime on the primary FortiGate with the following CLI command:

 

diagnose sys ha reset-uptime


Scenario 3: Choose to reboot Primary-FortiGate to force failover regardless of the configuration:

 

execute reboot

This operation will reboot the system !

Do you want to continue? (y/n) y

 

Scenario 4: Force failover regardless of the configuration and without rebooting the device:

 

execute ha failover set 1
Caution: This command will trigger an HA failover.
It is intended for testing purposes.
Do you want to continue? (y/n) y