Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Mohamed_Gaber
Contributor

FortiGate Notification to migrate the configuration when logging in with GUI

After upgrading to FortiOS 7.4, I am getting a notification to migrate the configuration when logging in with GUI. Is it necessary? What does it affect?

Mohamed Gaber
Cell : +201001615878
E-mail : mohamed.gaber@alkancit.com
Mohamed GaberCell : +201001615878E-mail : mohamed.gaber@alkancit.com
1 Solution
pminarik
Staff
Staff

I assume you are most likely referring to the new optional step in the initial "FortiGate Setup" splash screen, as shown here:
https://docs.fortinet.com/document/fortigate/7.4.0/new-features/819483/forticonverter-in-the-gui

https://docs.fortinet.com/document/fortigate/7.4.0/new-features/789375/forticonverter-usability-impr...

 

It is intended to be used when migrating fom one model to another, so if you merely updated the firmware and have no intention of migrating, you can safely ignore it.

[ corrections always welcome ]

View solution in original post

3 REPLIES 3
pminarik
Staff
Staff

I assume you are most likely referring to the new optional step in the initial "FortiGate Setup" splash screen, as shown here:
https://docs.fortinet.com/document/fortigate/7.4.0/new-features/819483/forticonverter-in-the-gui

https://docs.fortinet.com/document/fortigate/7.4.0/new-features/789375/forticonverter-usability-impr...

 

It is intended to be used when migrating fom one model to another, so if you merely updated the firmware and have no intention of migrating, you can safely ignore it.

[ corrections always welcome ]
Mohamed_Gaber

Thanks,

Yes, it is.

I actually just did an upgrade.

I have an issue and I don't know if it is correct to do this or not.

When I try to access one FortiGate member in Cluster CLI from the other the connection is closed.

FortiGate01 # execute ha manage 1 admin
Connection closed by 169.254.0.2

When I take backups for the configuration and compare them, I always find a difference, especially in the passwords. Although they show synchronized in the HA.

What if I migrate the configuration from one of them to the other?

Mohamed Gaber
Cell : +201001615878
E-mail : mohamed.gaber@alkancit.com
Mohamed GaberCell : +201001615878E-mail : mohamed.gaber@alkancit.com
pminarik

Password hashes can typically be ignored when comparing config backups, as their "textual representation" isn't stable, even when the real value remains unchanged.

If you can't connect to the secondary, nor is it synchronising (other config sections mismatch), that suggest a problem in HA connectivity.

You can certainly copy over the configuration to the secondary, with the necessary changes (hostname, Ha priorities, individual management intereface+IP configs), but you may need to repeat that if the root cause is not addressed.

 

You can try some of the steps listed here for some DIY troubleshooting: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-HA-synchronization-issue-cluster-out...

Alternatively, or if that fails, reach out to TAC for assistance. This KB lists some useful info you can attach in the initial report. - https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-HA-troubleshooting-information-for-T...

[ corrections always welcome ]
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors