Replacing A Failed Module In A Fortigate-7000 Chassis In An Ha Cluster - Fortinet FortiGate-7060E Handbook

Operating a FortiGate-7000
If in_sync is not equal to 1 or if a module is missing in the command output you can try restarting the
modules in the chassis by entering execute reboot from any module CLI. If this does not solve the problem,
contact Fortinet support.
Replacing a failed module in a FortiGate-7000 chassis in an HA cluster
1. Power down the failed module by pressing the front panel power button.
2. Remove the module from the chassis.
3. Insert the replacement module. It should power up when inserted into the chassis if the chassis has power.
4. The module's configuration is synchronized and its firmware is upgraded to match the configuration and firmware
version on the primary module. The new module reboots.
5. Confirm that the module is running the correct firmware version.
Manually update the module to the correct version if required. You can do this by logging into the module and
performing a firmware upgrade.
6. Configure the new module for HA operation. For example:
config system ha
set mode a-p
set chassis-id 1
set hbdev m1 m2
set hbdev-vlan-id 999
set hbdev-second-vlan-id 990
end
7. Optionally configure the hostname:
config system global
set hostname <name>
end
The HA configuration and the hostname must be set manually because HA settings and the hostname is not
synchronized.
8. Verify that the configuration has been synchronized.
The following command output shows the sync status of the FIM modules in a FortiGate-7000 chassis. The field
in_sync=1 indicates that the configurations of the modules are synchronized.
diagnose sys confsync
status | grep in_sy
FIM04E3E16000080, Slave, uptime=177426.45, priority=2,
slot_id=1:2, idx=0, flag=0x0, in_sync=1
FIM10E3E16000063, Master, uptime=177415.38, priority=1,
slot_id=1:1, idx=1, flag=0x0, in_sync=1
If in_sync is not equal to 1 or if a module is missing in the command output you can try restarting the
modules in the chassis by entering execute reboot from any module CLI. If this does not solve the problem,
contact Fortinet support.
Installing firmware on an FIM or FPM module from the BIOS using a TFTP
server
Use the procedures in this section to install firmware on a FIM or FPM module from a TFTP server after
interrupting the boot up sequence from the BIOS.
FortiGate-7000
Fortinet Technologies Inc.
Installing firmware on an FIM or FPM module from the BIOS using a TFTP server
46