HA not synchronized post Firmware Upgrade and Forcing Synchronization

[mario_veiga]

Good day.

If you have "HA Not Synchronized" error and have attempted the below without any luck;

https://kb.fortinet.com/kb/documentLink.do?externalID=FD45183

https://kb.fortinet.com/kb/documentLink.do?externalID=FD36494

https://kb.fortinet.com/kb/documentLink.do?externalID=FD31379

Do the following:

On primary unit, "config system ha" "set override enable", "set override-wait-time 120".

On secondary unit, "config system ha" "set override disable".

This forces the Primary Active unit to take "Active State" after a reboot; however, with a time buffer of 120sec.

Download the Fortigates configuration file. "Configuration", "Backup"

Select Global, Local PC, FortiOS.

This will download the Primary Fortigates full config file.

Open this file using a text editor.

Find or search for "config system ha"

Delete the "set override enable", "set override-wait-time 120"

Edit the "set priority value" to that of your current Secondary Unit, or something lower than the value of the Primary unit.

Save the file.

Reboot your Primary Firewall, the Secondary unit will become active.

While the Primary unit is rebooting, Log into the Secondary unit (now active).

Select "configurations", "restore", and "upload" the .conf file you edited above.

Allow some time (120sec or 2 minutes) for the Firewall to reboot. (Primary would have already become active at this point.

Basically, you have copied the Primary Units "FULL Config" file manually onto the Secondary unit, including uuid's and table values that usually cause a "HA Not Synchronized" error.

All you have to rectify is devices Hostname as both Firewalls will share the same Hostname.

Best of luck.