FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes the criteria for selecting the primary unit in a FortiGate High Availability (HA) configuration, depending on whether the override feature is enabled or disabled.
The criteria include the number of operationally UP Monitored interfaces, HA uptime, priority, and serial number of the devices.
Scope
FortiGate.
Solution
Primary unit selection process.
When override is disabled (MUPS):
The device that has a higher number of operationally UP Monitored interfaces (M).
The device that has the highest HA Uptime. not the unit uptime (U).
The device which has the highest Priority (P)
Device which has the highest Serial Number (S).
Additional note :
If the HA uptime difference between the two units is less than 5 minutes (300 seconds), then Priority will be considered as per the 4th point below. This would usually happen during HA cluster firmware upgrade if an upgrade between clusters happens in less than 5 minutes, then Primary will be selected based on the highest Priority :
Some points to remember about primary unit selection:
The FGCP compares primary unit selection criteria in the following order: Failed Monitored interfaces -> Age -> Device Priority -> Serial number. The selection process stops at the first criteria that select one cluster unit.
Negotiation and primary unit selection are triggered if a cluster unit fails or if a monitored interface fails.
If the HA age difference is more than 5 minutes (300 seconds), the cluster unit that is operating longer becomes the primary unit.
If the HA age difference is less than 5 minutes (300 seconds), the device priority will be checked first. If the priority value is the same on both devices, the FortiGate will select based on serial number to become the primary unit.
Every time a monitored interface fails, the HA age of the cluster unit is reset to 0.
Every time a cluster unit restarts, the HA age of the cluster unit is reset to 0.
When override is enabled (MPUS):
The device that has a higher number of operationally UP Monitored interfaces (M).
The device that has the highest Priority (P).
A device that has the highest HA Uptime. not the unit uptime (U)
The device that has the highest Serial Number (S).
