Reverting to an earlier firmware version could reset settings that are not compatible with the new firmware. Back up your configuration before beginning this procedure.Read the release notes for the version you plan to install.Download the firmware file from the Fortinet Customer Service & Support website:.Instead, switch out of HA, downgrade each node individually, then switch them back into HA mode. The HA daemon on a member node might detect that the primary node has older firmware, and attempt to upgrade it to bring it into sync, undoing your downgrade. If downgrading to a previous version, do not use this procedure. The same procedure applies to both active-active and active-passive clusters. To ensure minimal interruption of service to clients, use the following steps. The administrator procedure for an HA cluster is similar to the procedure for installing firmware on a standalone appliance. Reboot times vary by the appliance model, and also by differences between the original firmware version and the firmware version you are installing. Therefore it will not resume its active role instead, the node with the greatest uptime will remain the new primary node. The original primary node will have a smaller uptime due to the order of reboots during the firmware upgrade. If Override is disabled, the cluster considers uptime first.Both nodes usually make a second failover in order to resume their original roles. If Override is enabled, the cluster considers the Device Priority setting.When the system is rebooting, a member node assumes primary status, and the traffic fails over from the former primary node to the new primary node.Īfter the upgrade process is completed, the system determines whether the original node becomes the primary node, according to the HA Override setting: The upgrade command is run on the primary node, and it reboots.The upgrade command is run on the member nodes, the systems are rebooted, and the member nodes send the primary node an acknowledgment that upgrade has been completed.The primary node notifies the member nodes of the upgrade, and it takes their user traffic during the upgrade.The primary node pushes the firmware image to the member nodes.The following process occurs when you perform the HA upgrade procedure: You can upgrade firmware on all nodes in a cluster from the primary node.
Chapter 13: High Availability Deployments > Updating firmware for an HA cluster Updating firmware for an HA cluster
0 kommentar(er)
