Fortinet white logo
Fortinet white logo

Administration Guide

Firmware upgrades are prevented for FortiGate HA clusters in MVC mode

Firmware upgrades are prevented for FortiGate HA clusters in MVC mode

FortiManager detects FortiGate HA clusters operating in multi-version cluster (MVC) mode, provides a warning, and prevents the cluster firmware from being upgraded.

For more information on MVC mode, see the FortiGate Administration Guide.

Example
  1. Configure the FortiGate HA cluster with MVC mode:

    1. On the first FortiGate, configure HA settings in System > HA.

    2. In the FortiGate CLI, set upgrade-mode to local-only.

    3. Repeat the steps above on the second FortiGate.

    4. Go to System > HA and verify that the HA is formed and synchronized.

  2. Attempt to upgrade the FortiGate cluster from FortiManager.

    1. Go to Device Manager > Device & Groups > Managed FortiGate > Dashboard: Summary, and verify that the cluster is in Local Only HA Upgrade Mode.

    2. Go to Device Manager > Device & Groups > Managed FortiGate, select the device and click More > Firmware Upgrade and try to perform a direct upgrade of the firmware. A warning message is displayed denying the firmware upgrade of the MVC enabled HA cluster.

    3. Go to Device Manager > Firmware Templates, and try to assign the device to a firmware template. A warning message is displayed stating that firmware upgrades for MVC-enabled HA clusters is not allowed.

Firmware upgrades are prevented for FortiGate HA clusters in MVC mode

Firmware upgrades are prevented for FortiGate HA clusters in MVC mode

FortiManager detects FortiGate HA clusters operating in multi-version cluster (MVC) mode, provides a warning, and prevents the cluster firmware from being upgraded.

For more information on MVC mode, see the FortiGate Administration Guide.

Example
  1. Configure the FortiGate HA cluster with MVC mode:

    1. On the first FortiGate, configure HA settings in System > HA.

    2. In the FortiGate CLI, set upgrade-mode to local-only.

    3. Repeat the steps above on the second FortiGate.

    4. Go to System > HA and verify that the HA is formed and synchronized.

  2. Attempt to upgrade the FortiGate cluster from FortiManager.

    1. Go to Device Manager > Device & Groups > Managed FortiGate > Dashboard: Summary, and verify that the cluster is in Local Only HA Upgrade Mode.

    2. Go to Device Manager > Device & Groups > Managed FortiGate, select the device and click More > Firmware Upgrade and try to perform a direct upgrade of the firmware. A warning message is displayed denying the firmware upgrade of the MVC enabled HA cluster.

    3. Go to Device Manager > Firmware Templates, and try to assign the device to a firmware template. A warning message is displayed stating that firmware upgrades for MVC-enabled HA clusters is not allowed.