Hi,
i have a strange problem on VRRP preeempt configuration on 2 Fortigate 1000C running FortiOS 5.4. The behaviour i desire is:
- if a Master (Priority 255) VRRP interface goes DOWN (link Down, for example), the Backup (Priority 100) VRRP interface must become Master and acquire the VRIP (this works!!!)
- when the interface link that went down (Priority 255) becomes UP again... I don't want this interface became Master again, but i still want the "Priority 100" Interface remains Master. (Not working)
To reach this goal, i suppose it was enough putting Preemption disable like the configuration above:
Interface Fortigate 1
config system interface
edit “DMZ”
config vrrp edit 50 set vrip 10.10.10.1 set priority 255 set status enable set preempt disable end set vrrp-virtual-mac enable end
Interface Fortigate 2
config system interface
edit “DMZ”
config vrrp edit 50 set vrip 10.10.10.1 set priority 100 set status enable set preempt disable end set vrrp-virtual-mac enable end
When the interface link that went down (Priority 255) becomes UP again, this interface advertises the other one about its higher priority value and became Master again automatically... Maybe is my fault, but is not correct to put "set preempt disable" on both VRRP interfaces configuration ?
Thank you,
Roberto
User | Count |
---|---|
2116 | |
1187 | |
770 | |
451 | |
344 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.