Secondary cluster member not synchronizing with the Primary

jomof · ‎05-17-2024

Hello Expert,

We have two 400E fortigates in a HA cluster.
This afternoon we temporary shutdown the secondary member in facilitate changing a defective patch cable which was connected to the respective HA ports on the active and passive device.
The defective cable was remove ad replace with new one.
When the secondary FortiGate was repowered during checking the system status it was discovered HA was out of sync.
I humbly request you assistance to fix same.

ozkanaltas · ‎05-17-2024

Hello @jomof,

This change you make should not affect traffic.

The reason why Fortigates cannot synchronize is because the priority is in an unacceptable range. In old versions, you could set the priority value to 0, but in new versions you need to set it to minimum 1. This value did not change during the upgrade, even though it should have. This was corrected in the configuration check when the secondary device was turned on. If you change this value to 1 on the first device, the synchronization problem will be solved. Also, if you want to confirm this, you can run these commands on the secondary device and check the priority value.

config router static

edit 1

show full-configuration

end

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW

View solution in original post

jomof · ‎05-19-2024

Hello ozkanaltas,

Thank for you invaluable contribution it fix the issue immediately.

Regards