Move HA from Active-Passive to Active-Active

[keithnet]

Hey, I need to change my HA configuration but can' t seem to find documentation for this. Can I just flip the switch to active active and both units in the HA figure it out? Or do I need to disable HA and reset it up?

[rwpatterson]

Well, if you disable A-P, then you have 2 firewalls. Simply set them up as A-A, making sure that the primary has the higher priority, or the bogus settings from the backup unit will overwrite the good one.

[Zeihold_von_SSL]

No you can just change the ha config via gui. But you may have a look at the ha guide provided by fortinet: http://docs.fortinet.com/fgt/handbook/40mr3/fortigate-ha-40-mr3.pdf You also may loose connection (a short interrupt) while the cluster changes its state from a-p to a-a. We have done this about 9 moths ago. I don' t rember anything special.

[keithnet]

Excellent. Thank you for the reply!

[emnoc]

Just remember in a cluster the HA priority needs to be review. Also keep in mind the priority FW handles all broadcast, icmp and udp traffic. You can add numerous secondareis firewalls into the cluster to distribute load-balancing and other functions. just make sure ; you have redundant HA links and the same model with same code