Description | This article describes the geo-redundant HA with VRRP firmware upgrade behavior with two members which are Primary and Secondary. |
Scope | FortiManager HA. |
Solution |
The geo-redundant HA with VRRP firmware upgrade behavior is similar to normal HA Primary-Secondary upgrade, whereby the firmware is loaded from the Primary and the Secondary will receive the same image via port TCP/5199 over Layer 3 network from the Primary.
A scheduled upgrade downtime maintenance window is mandatory as both members will loaded with the same image, get rebooted, and then upgraded at the same time.
The following snippet is observed on the CLI console when the image is loaded and then rebooted to upgrade:
|
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.