FortiGate Notification to migrate the configuration when logging in with GUI

[Mohamed_Gaber]

After upgrading to FortiOS 7.4, I am getting a notification to migrate the configuration when logging in with GUI. Is it necessary? What does it affect?

[pminarik · Accepted solution]

I assume you are most likely referring to the new optional step in the initial "FortiGate Setup" splash screen, as shown here:
https://docs.fortinet.com/document/fortigate/7.4.0/new-features/819483/forticonverter-in-the-gui

https://docs.fortinet.com/document/fortigate/7.4.0/new-features/789375/forticonverter-usability-impr...

It is intended to be used when migrating fom one model to another, so if you merely updated the firmware and have no intention of migrating, you can safely ignore it.

[Mohamed_Gaber]

Thanks,

Yes, it is.

I actually just did an upgrade.

I have an issue and I don't know if it is correct to do this or not.

When I try to access one FortiGate member in Cluster CLI from the other the connection is closed.

FortiGate01 # execute ha manage 1 admin
Connection closed by 169.254.0.2

When I take backups for the configuration and compare them, I always find a difference, especially in the passwords. Although they show synchronized in the HA.

What if I migrate the configuration from one of them to the other?

[pminarik]

Password hashes can typically be ignored when comparing config backups, as their "textual representation" isn't stable, even when the real value remains unchanged.

If you can't connect to the secondary, nor is it synchronising (other config sections mismatch), that suggest a problem in HA connectivity.

You can certainly copy over the configuration to the secondary, with the necessary changes (hostname, Ha priorities, individual management intereface+IP configs), but you may need to repeat that if the root cause is not addressed.

You can try some of the steps listed here for some DIY troubleshooting: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-HA-synchronization-issue-cluster-out...

Alternatively, or if that fails, reach out to TAC for assistance. This KB lists some useful info you can attach in the initial report. - https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-HA-troubleshooting-information-for-T...