|
FortiGate-7000 devices support High availability in Active-Passive mode with only two devices.
Depending on the HA configuration, changing the priority or resetting the HA uptime triggers a failover.
To check the current HA configuration through CLI:
config global
show full-configuration system ha
Priority, override, and monitor are the important elements to look at.
During the primary unit election in the 7000 cluster, if override is disabled, the following criteria are considered:
Override Disabled: Any Active FPMs -> Number of active FIM -> Connected Monitored Ports -> Number of Active FPMs -> HA uptime -> Priority -> Serial Number.
While the number of connected monitor ports, and Active FPMs / FIMs are identical, it is the HA uptime that acts as a tiebreak.
To force a failover, it is necessary to reset the ha uptime on the current primary:
config global
diag sys ha reset-uptime
If override is enabled the following criteria are considered:
Override Enabled: Any Active FPMs -> Number of active FIM -> Connected Monitored Ports -> Number of Active FPMs -> Priority -> HA uptime -> Serial Number.
To force a failover, it is necessary to change the priority:
config global
config system ha
set priority <priority number>
The unit with the highest priority will become primary.
Related article:
Technical Tip: Understanding the HA uptime for Chassis based device |
