Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mafton
New Contributor

HA active-passive problem

Hi, I have configured 2 fortigate in active-passive mode . I provide all licenses for the Active one (Master) . but it cannot be updated . when i disconnect or shutdown passive from cluster , active can be update immediately . should i buy license for the slave too? what is the problem? thanks .
Norozi
Norozi
9 REPLIES 9
billp
Contributor

Unless Fortinet has changed policies recently, both units in an HA cluster need to be fully licensed. There is no discount/free ride here, unfortunately. Not sure if this is exactly the problem you are experiencing, though.

Bill ========== Fortigate 600C 5.0.12, 111C 5.0.2 Logstash 1.4.1

Bill ========== Fortigate 600C 5.0.12, 111C 5.0.2 Logstash 1.4.1
mafton
New Contributor

thanks billp Is there any reference about this policy?
Norozi
Norozi
Zyndarius
New Contributor

I am actually experiencing the same problem. HA cluster of two FG620B, master licensed, slave not licensed. Master is unable to automatically update its databases. Is there anybody that can help me with some extra information about the topic. I really need to get 100% reliable information up to the date related to this. Thank you in advance for any possible help.
romanr
Valued Contributor

Hi, as far as I remember this policy was changed either with FortiOS 3 MR7 or with FortiOS 4... So this has been there for some years already, even some of the older softwares still do not check for licenses of all cluster members! I think this policy is at least as old as the 620B device generation! So the reliable information is: with any FortiOS 4, all cluster members need to be licensed in the cluster for the cluster to receive services!! There are massive discounts for clustered installations, but both members need to be purchased together, registered and licensed together... best regards, Roman
Zyndarius
New Contributor

Thank you romanr. Now I have the things much clearer.
rwpatterson
Valued Contributor III

I have taken 3 devices (2 FGTs and a FAZ) purchased at different times and rolled them into a single clustered contact. Don' t know if my reseller pulled some strings, but we got it. Discount on the second unit (FGT) as well.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
ede_pfau
SuperUser
SuperUser

AFAIK there' s no cluster rebate on service contracts in Germany (or, any more). But in Austria and NL.
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
FortiRack_Eric
New Contributor III

There' s no bundel / fortiguard contract discount for HA units in NL (nowhere as far as I know).

Rackmount your Fortinet --> http://www.rackmount.it/fortirack

 

Rackmount your Fortinet --> http://www.rackmount.it/fortirack
romanr
Valued Contributor

(nowhere as far as I know).
Here in Austria there is a discount for clustered installations and renewals >= 110C ...
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors