Technical Tip: New FGCP Cluster Upgrade Mode

[spoojary]

Description	This article shows the change in the upgrade mode while in HA.
Scope	FortiGate.
Solution	Overview: The new FGCP cluster upgrade mode offers administrators greater manual control during the upgrade process. The core objective of this mode is to ensure smooth traffic through the upgraded member by allowing it to operate temporarily in a multi-version cluster (MVC). Key Features: Multi-Version Cluster (MVC): Allows HA members to run in different software versions temporarily during the upgrade process. Manual Control: Administrators can select which cluster member to upgrade and can then test traffic through the upgraded member. Upgrade Mode Variants: In the newer version, administrators can choose from several upgrade modes. In version 7.4.0 of the FortiGate, there were only two modes that are enable and disable. config system ha     set uninterruptible-upgrade {enable | disable} end In Version 7.4.1 the command has been changed to 'upgrade-mode'. config system ha     set upgrade-mode {simultaneous | uninterruptible | local-only | secondary-only} end Upgrade Modes Explained: Simultaneous: All cluster members are upgraded concurrently. Uninterruptible: Upgrade takes place without any interruptions. Local-only: Upgrades the specific local cluster member. Sessions are then synchronized to this member. Administrators can manually switch and test traffic on this upgraded member while the cluster remains in MVC. Secondary-only: Only the secondary cluster member gets upgraded. After synchronization, administrators can manually switch and check traffic. The primary unit can be manually upgraded post-testing. Workflow for local-only and secondary-only modes: Set the desired upgrade mode (either local-only or secondary-only). The specified cluster member will be upgraded. Sessions are synchronized to the upgraded member. Administrators can manually switch to the upgraded member to confirm that traffic is flowing smoothly. Once satisfied, administrators can proceed to upgrade the other cluster members. Note:  The new FGCP cluster upgrade mode in version 7.4.1 and later offers a more flexible and controlled upgrade approach, allowing administrators to ensure a smooth traffic flow during and after the upgrade. Related document: https://docs.fortinet.com/document/fortigate/7.4.0/new-features/768800/fgcp-multi-version-cluster-up...