FortiGate HA stand-alone-config

[Chris_k]

We have a production Forti100F ver 7.4.4, we bought another Forti100F, and try to set up HA in configuration mode only.

The secondary  Fortigate has only management ip interface set up.

We issue the basic commands for setting the HA as in the admin guide, but never synched.

Are there some prerequisites we are missing, or thiw mode does not work ?

Thanks in advanced

[amrit]

Make sure both devices are on the same firmware version 

The best way is to download the config from the primary device. Edit in the notepad or notepad ++, change the hostname and the HA priority, and make it lower than the primary.

Upload the configuration to the secondary.  Attach the  HA cables and wait up to 5 mins.

If that doesn't solve the problem , follow this link for the troubleshooting : https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-troubleshoot-HA-synchronizati...

[Chris_k]

HA mode is config only.

Firmware is the same 7.4.4

only ha cables are connected.

[Toshi_Esumi]

I assume you followed this guide:
https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/900885/ha-active-passive-clu...
Then if HA cable(s) are connected, at least it should form a-p HA.

To check the status, use "get sys ha status". And share us the output.

Toshi

[Toshi_Esumi]

At this stage, I don't recommend you change the priorities from the default 128 to "override" in order to simplify and figure out the current problem. You can set it later after you get yourself more familiarized with HA operation. Just make sure the secondary unit you're adding was booted up more than 5 min later than the primary was booted up. That would be the deciding factor when the priorities are the same between them. Otherwise, the unit has a higher S/N takes over the primary role and the other side will sync the config to it, which might not be your intended result.

Toshi

[Chris_k]

No

this guide follwed

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/84777/standalone-configurati...

[Toshi_Esumi]

Looks like it's a new feature with 7.4, which I never used/tested. Wait for comments from others who knows about the feature.

Toshi