Fortinet 1101E HA syncronization

[iasadiqbal]

I have two firewalls of 1101E fortinet. HA has syncronization issue. There are different 15 parameters which are not synchronized with primary how can I cope with this issue?. Same primary firewall when we enable IPsec VPN based policy give error in tunnel interface but via cli not issued 

[dingjerry_FTNT]

Hi @iasadiqbal ,

Please use this KB for FGT HA sync issue troubleshooting:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-troubleshoot-HA-synchronizati...

[DPadula]

Hi Iasadiqbal,

Try the procedure sent by my colleague @dingjerry_FTNT first. In case it does not solve the issue.

Download the configuration file of the primary, change the hostname and HA settings. Make sure you disconnect the secondary from the HA cluster before you load the modified configs into the secondary. 

Once secondary is up and running you can connect it back to the cluster. They should be in sync after that few minutes.

Regards

DPadula