Hello,
this morning we decided to update a FG80F cluster from 7.4.4 to 7.4.5.
Stupid from my side, I did not check if the HA was synced and I did not notice anything wrong. I uploaded 7.4.5 and I lost access to the FG so that the Slave did not enter in the game.
After restart of the master we still had no sign of the slave. Since this is a remote side I asked a person to remove all cables from the slave unit and try to connect via port 1 LAN but there is no ping. Than we restarted the slave thinking that it might start as master but still no access. This unit for sure did not update to 7.4.5 and being with another OS it will not work in the HA anymore.
Any ideas to solve this? At the end there is just the option to access via console? Only change to reset and start HA over?
Thanks!
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Also please provide this output from the primary.
get system startup-error-log
Hi,
but how do I get the log, I dont want to restart not knowing the failover works fine...also not now in Business Hours.
Thanks,
Roland
Hi Roland
Thanks for the screenshot. It shows there is only one non-important section that is not synced. This should not be hard to fix.
You don't need to restart the primary. Just enter the command "get system startup-error-log" and share the output. It will show if there is an anomaly in this section due to some upgrade you may have done before.
The good news is that your cluster is already HA. It means in case your primary goes down then your secondary will take over.
You should be able to fix it just by entering this command in the primary node:
config system custom-language
edit "en"
set filename "en"
set comments ''
next
edit "fr"
set filename "fr"
set comments ''
next
edit "sp"
set filename "sp"
set comments ''
next
edit "pg"
set filename "pg"
set comments ''
next
edit "x-sjis"
set filename "x-sjis"
set comments ''
next
edit "big5"
set filename "big5"
set comments ''
next
edit "GB2312"
set filename "GB2312"
set comments ''
next
edit "euc-kr"
set filename "euc-kr"
set comments ''
next
end
Then:
diag sys ha checksum recalculate
Hi,
we found some suggestions on Reddit and in some cases it got solved with a reboot of the master unit. So we did that and the Slave took over without any problems. So the HA failure is working. After the Master rebooted we waited like 10mins but there is still the NO SYNC of the custom language line. We also did on both units diagnose sys ha checksum recalculate but it is still the same.
I never did changes on the config on an active unit so I dont know if it risky or not?
No other option? Stupid bug, no? I mean both units were updated to 7.4.5, why is this field different?
Thanks
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1662 | |
1077 | |
752 | |
443 | |
220 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.