if you already tried to configure FortiAuthenticator and are running into issues, AND if your FortiAuthenticators have a support contract, you should still be able to open a ticket on your FortiAuthenticator ticket and request assistance.
-> you tried to configure according to available documentation
-> you are gettting unexpected errors
What TAC does NOT do is configure the FortiAuthenticator from scratch for you, but this is not what you're asking us to do, from what I can see.
Regarding the HA schema mismatch:
- have you double-checked that the configured HA password is correct on both units?
- in addition, there may be issues with fragmentation:
-> a load-balancing pair establishes an OpenVPN tunnel between themselves
-> if the traffic goes via an IPSec tunnel, you essentially have a VPN inside a VPN
-> it is something to keep an eye on, but it doesn't necessarily happen
+++ Divide by Cucumber Error. Please Reinstall Universe and Reboot +++