FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
msolanki
Staff
Staff
Article Id 420559
Description This article describes the steps to troubleshoot and resolve the issue related to registering devices with a single license in a FortiGate HA cluster.
Scope

FortiGate.

Solution

When a FortiGate cluster is deployed in an HA configuration by following the Single FortiGuard license for FortiGate A-P HA cluster, the device may still fail to register, and the logs may display the following errors:

 

FGT1 # diagnose sys ha dump-by debug-zone

HA information.

is_manage_primary=1,manage_vd=root,ip=169.254.0.2,num=2,nvcluster=1,jiffies=456481.

No logical serial number,retry times=10

FG101FTK24005632, 1,0,00,10,0,7.4.2795,0,0,0,0.

FG101FTK24005677, 0,29,00,10,0,7.4.2795,1,1,-1,0.

vcluster_id=1.

FG101FTK24005632, 0,0.

FG101FTK24005677, 1,1.

 

  1. Check the FortiGate device's system configuration and ensure that the logical serial number (LSN) is enabled. The LSN is required for registration.
  2. Verify that the FortiGate devices are running the correct firmware version. Ensure that the firmware version is compatible with the registration process (FortiOS 7.2.9, 7.4.6 and 7.6.1 and above)
  3. Check the FortiCloud portal and ensure that the devices are properly registered and that the registration status is up-to-date.
  4. If the issue persists and the 'No valid cluster keyerror appears in the diagnose debug update-1 output, try disabling and re-enabling the Logical Serial Number (LSN) in the HA configuration.

    For more details, refer to the following article: Technical Tip: Logical SN or vSN does not appear on the HA status.

  5. If the device is still not registering, try de-registering it from the FortiCloud portal and then registering it again. If needed, contact the CS team for assistance.

 

Related document:

Single FortiGuard license for FortiGate A-P HA cluster - FortiGate 7.4.0 new features