Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
asomnet-sysadm
New Contributor II

New serial number received

Hi,

 

So our fortigate cluster restarted last night. We got the following messages over SNMP :
FortiGate: Device has been replaced (new serial number received)
FortiGate: System name has changed (new name: xxx-fw1-n1.xxx.net)

FortiGate: xxx-fw1 has been restarted (uptime < 10m)

 

This also meant one of our VPN tunnels went down and which generated an alarm. What might have happened here?

1 Solution
AEK
SuperUser
SuperUser

Hi

This looks like a fail-over.

Some possible reasons are: manual restart, hardware failure, interface down (if interface monitoring is enabled), or firmware update (in case auto firmware update is enabled).

You may need to check the system logs on both nodes for more information.

AEK

View solution in original post

AEK
4 REPLIES 4
srajeswaran
Staff
Staff

When you say cluster restarted, do you mean it failed over? If so, the new serial number is of the old backup node.
Regarding VPN tunnels flap, its expected with cluster failover.

Regards,
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.
asomnet-sysadm

Hi Suraj,

Yeah, it seems it did fail over due to an automatic update. Thanks!

AEK
SuperUser
SuperUser

Hi

This looks like a fail-over.

Some possible reasons are: manual restart, hardware failure, interface down (if interface monitoring is enabled), or firmware update (in case auto firmware update is enabled).

You may need to check the system logs on both nodes for more information.

AEK
AEK
asomnet-sysadm
New Contributor II

Hi Aek,

Yeah it did fail over due to an automatic firmware update. We didn't know it was turned on, probably happened after last firmware update, so I've turned it off again. Thanks!

Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors