FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Shilpa1
Staff
Staff
Article Id 249745
Description

This article describes the criteria used to select the primary unit in a FortiGate High Availability (HA) configuration, depending on whether the override feature is enabled or disabled. 

The criteria include the number of operationally UP Monitored interfaces, HA uptime, priority, and a serial number of the devices.

Scope FortiGate.
Solution

Primary unit selection process.

 

When override is disabled (MUPS):

1) Device which has a higher number of operationally UP Monitored interfaces (M)
2) Device which has the highest HA Uptime. not the unit uptime (U).
3) Device which has the highest Priority (P).
4) Device which has the highest Serial Number (S).

 

When override is enabled (MPUS):
1) Device which has a higher number of operationally UP Monitored interfaces (M).
2) Device which has the highest Priority (P).
3) Device which has the highest HA Uptime. not the unit uptime (U).
4) Device which has the highest Serial Number (S).

Related articles:
https://docs.fortinet.com/document/fortigate/6.0.0/handbook/666653/primary-unit-selection-with-overr...
https://docs.fortinet.com/document/fortigate/6.0.0/handbook/123439/primary-unit-selection-with-overr...

Contributors