FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
sagha
Staff
Staff
Article Id 363408
Description

This article describes that a reboot will occur after the settings are changed for ULL ports on NP7 devices that are in High Availability (HA).

Scope FortiGate.
Solution

By default, ULL ports are configured as 10G. If these settings is changed, this will cause a reboot to the FortiGate. 

 

In High Availability scenario, changing this setting will cause a reboot of the entire cluster. 

 

FG6H0F-3 # show full-configuration system npu | grep ull
    set ull-port-mode 10G
 
FG6H0F-3 # config  system npu 
FG6H0F-3 (npu) # set ull-port-mode 25G
FG6H0F-3 (npu) # end
NP7 ULL port mode speed change will take effect after system reboot, and then override the speed setting under related ULL ports.
Do you want to continue? (y/n)y
 
After continuing, the reboot of Primary FortiGate will occur and since the config gets synced to Secondary FortiGate, this will also end up rebooting the Secondary FortiGate. 
 
This change should only be implemented in a maintenance window.
 
If its important to avoid any interruptions that may be caused by cluster reboot, it is advised to break the cluster and perform the changes on each device individually to avoid any downtime.
 
Note:
If there is a mismatch for the ULL port settings between the primary and secondary FortiGates, the primary FortiGate will automatically reboot the secondary FortiGate to apply the ULL setting that is configured on the primary unit.