FortiGate Interface Monitoring HA Failover Not working
I've setup HA interface monitoring for FortiGate. When the link from primary unit down , the Firewall should Failover but it didn't failover and the primary unit still remain active regardless of the links fail.
I tried removing both FortiGate from HA and reconfigured and tested but still the same , the HA failover is not happening. Are there any possibilities that could prevent from FortiGate Interface Monitoring to be stopped working? We are using version 7.2.0 .
When the link is down, check "get sys ha status". If either side of HA units detected the monitoring interface down it should show like below at the top of the output.
HA Health Status:
WARNING: <serial_number> has mondev down;
I noticed you're monitoring two "port-channel"s and I'm assuming two of more connections are bound together. If only one connection goes down, the "link" doesn't go down. When you test, you need to pull all cables out in the "port-channel" or LAG.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.