

Proceed to increase the vCPU or vRAM accordingly on secondary FortiGate.Before you can connect to the FortiGate VM web-based manager you must configure a network interface in the FortiGate VM console.

Power primary FortiGate up when secondary FortiGate is powered down.Ĩ) When primary FortiGate is back online, it will process the traffic. To resolve this, shutdown p rimary FortiGate and increase the vCPU or vRAM accordingly.ħ) Upload the license on secondary FortiGate, and repeat the process of shutting it down once it has been rebooted from the import of license.


This issue is called a split-brain and it happens due to the mismatch of license entitlement between the primary and secondary FortiGate. After the above steps are done, repeat step a-c on secondary FortiGate.ĥ) Based on the console output, it is possible to see that primary FortiGate has been updated with the proper license:Ħ) However, it is possible to see that the HA is not forming and users will get difficulty connecting to the IP of FortiGate management GUI: Power up primary FortiGate once the resources have been added. Once the primary FortiGate is shutdown, increase the resources such as CPU or memory accordingly from the hypervisor platform. Once the primary FortiGate started successfully, quickly initiate the shutdown process by running the command: Upload and import the license to primary FortiGate, the primary FortiGate shall reboot and the secondary FortiGate will take over the master role (ref. It would be recommended to perform the respective during the maintenance window.Ĥ) The process to upgrade the license on the FortiGate VM HA pair is as below: This article describes the steps required to upgrade FortiGate-VM HA pair VM licenses and increase VM resources such as CPU and RAM.ġ) FortiGate HA will need to comply with the following criteria:Ģ) When users would like to upgrade the license to support more resources, without following the proper steps, the user may hit into the split-brain scenario and the network will intermittently get disconnected.ģ) There will be an interruption to the user’s traffic during the upgrade process as FortiGate will restart.
