|
In some scenarios, the older firmware versions of FortiGate configured with FortiLink Interface will have the Interface type as 'hard-switch'.
Example:
config system interface
edit "fortilink"
set vdom "root"
set fortilink enable
set allowaccess ping fabric
set type hard-switch
end
In recent firmware versions, the FortiLink interface will be configured with 'aggregate' as the type by default, and this cannot be changed.
Example:
config system interface
edit "fortilink"
set vdom "root"
set fortilink enable
set allowaccess ping fabric
set type aggregate
end
If the FortiGate with FortiLink Interface type 'hard-switch' is upgraded to a recent version, the type remains as it is, and if this FortiGate is set up in HA Cluster with the FortiGate running on newer firmware, then the HA will not be formed.
Note: The type of the interface cannot be changed once created as it is hard-coded.
As the interface type for FortiLink cannot be changed on either of the Firewall, this issue can be fixed only by performing the Format and Reinstall of FortiGate that as FortiLink interface type as 'hard-switch'.
After Format and Reinstall, the FortiGate will have a FortiLink interface with type 'aggregate' and HA can be formed seamlessly.
Related documents:
Format and Reinstall of firmware: Technical Tip: Formatting and loading FortiGate firmware image using TFTP.
High Availability (FGCP): FGCP.
|
