FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ahernandez_FTNT
Article Id 198067
Description
When a FortiGate chassis is balancing the workers with just one FortiController, the workers have been set on the operational mode "FortiController". At the moment an additional FortiController is implemented at the chassis in order to balance the workers with two FortiControllers working in HA (Active-Active or Active-Passive), the workers need to change their operational mode to "Dual-FortiController". However, this option seems to not be available on the workers previously implemented.

Solution
Each worker needs to be accessed via CLI one by one to change the operational mode to "none" as follow:
config system elbc
set mode none
end

This will force the worker to reboot.  Once the worker is back, repeat the change but this time using the option "dual-forticontroller":
config system elbc
set mode dual-forticontroller
end

The worker will reboot again. Once it is back, it should be able to work properly with both FortiControllers in HA.

Contributors