Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
unknown1020
New Contributor III

Change Master to Slave in FortiGate

Good morning team.

It is required to change the fortigate firewall from Master to Slave (slave to master), could you tell me if this action is performed from the GUI or from the CLI? I would appreciate it if you could share with me some document of the steps to be taken, since this is the first time I am going to perform this action and I am afraid of accidentally turning off the equipment.

4 REPLIES 4
Toshi_Esumi
SuperUser
SuperUser

Just a single command if uptime difference is more than 5 min and your're not using priority/override.

diag sys ha reset-uptime

Like in the KB:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Restoring-HA-master-role-after-a-failover-...

<edit>
also make sure you have below config:

config system ha

  set session-pickup enable
end

</edit>

 

Toshi

AnthonyH
Staff
Staff

Hello unknown1020,

 

In addition here are additional ways you can perform a failover:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Different-options-to-trigger-an-HA-failove...

Technical Support Engineer,
Anthony.
GauravPandya
New Contributor III

If override is disabled which is by default you can force failover by reset ha uptime on primary

diag sys ha reset-uptime 

 

If override is enabled you can force failover by changing priority in GUI or CLI.

jbernabe
Staff
Staff
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors