FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
heng
Staff
Staff
Article Id 361648
Description This article describes the geo-redundant HA with VRRP firmware upgrade behavior with two members which are Primary and Secondary.
Scope FortiManager HA.
Solution

The geo-redundant HA with VRRP firmware upgrade behavior is similar to normal HA Primary-Secondary upgrade, whereby the firmware is loaded from the Primary and the Secondary will receive the same image via port TCP/5199 over Layer 3 network from the Primary.

 

A scheduled upgrade downtime maintenance window is mandatory as both members will loaded with the same image, get rebooted, and then upgraded at the same time.

 

The following snippet is observed on the CLI console when the image is loaded and then rebooted to upgrade:

 

image.png