Technical Tip: How to restore HA Health-status

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 215236

Description

This article describes how to restore HA Heath-status.

Scope

FortiGate v6.2 and above.

Solution

In the FGCP HA cluster after removing a peer, an error will be received upon checking the HA status:

get system ha status

Primary selected using:
HA Health Status: ERROR: FG200ETK19904400 is lost @ 2022/06/21 15:59:36

There are cases where the peer is restored or added back to the cluster but the Health status still shows the ERROR state.

For these cases, the below command can be used to restore the HA status to normal (OK):

diagnose sys ha reset-health-status

The command is available for:

FortiOS 6.2 (6.2.8 and above).
FortiOS 6.4 (6.4.2 and above).

3788

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.