- Make sure the secondary unit is in sync with the primary unit and that all monitored interfaces on both cluster members show the 'up' state.
 Cluster status before the change
- Disable config synchronization by executing the following command on both cluster members (starting with the primary unit). Verify the sync-config is disabled on both cluster members before moving to the interface change steps.
config system ha
set sync-config disable
end
 Primary unit - sync-config disable
 Secondary unit - sync-config disable
- Modify the required interface settings on the secondary unit (for example: speed, or MTU size to support jumbo frames).
 Secondary unit - interface change
- Verify the interface shows the 'up' state and that both Rx dropped errors & Rx errors stats are not increasing. Only Rx bytes & Rx packets should increase. In the case of LAG interface settings modification, such as performing an MTU size change to support jumbo frames, verify LACP is negotiated for all physical ports due to a physical interface restart to use the inherited MTU size from the LAG interface. The LACP re-negotiation may take several seconds to change physical ports back to the collecting & distributing state.
 Secondary unit - Interface stats
- Once the interface change on the secondary unit is completed and the interface is stable, failover traffic from the former primary unit to the secondary unit and perform basic network connectivity testing.
 FGT01HA changed role to Primary
- If no issues are present, proceed with the same interface change and verification on the former primary unit (which will currently be in the secondary role).
 FGT01 in Secondary role - interface change
 FGT01 in Secondary role - Interface stats
- Once the interface change on the former primary unit is completed and the interface status is 'up' without increasing Rx errors or drops, failover traffic again to the former primary unit and perform network connectivity testing.
 FGT01 in Primary role, FGT01HA in Secondary role
- Enable config synchronization on all cluster members and verify the final HA cluster status.
NOTE: Always start with secondary unit(s) and then finish with the primary unit. After the change, verify the status of HA config-sync settings on each cluster member one by one to ensure it's enabled.
config system ha
set sync-config enable
end
 FGT01HA - enabled config-sync
 FGT01 - enabled config-sync
 FGT01 and FGT01HA - Final cluster status
|
