Firmware upgrades are prevented for FortiGate HA clusters in MVC mode
FortiManager detects FortiGate HA clusters operating in multi-version cluster (MVC) mode, provides a warning, and prevents the cluster firmware from being upgraded.
For more information on MVC mode, see the FortiGate Administration Guide.
Example
-
Configure the FortiGate HA cluster with MVC mode:
-
On the first FortiGate, configure HA settings in System > HA.
-
In the FortiGate CLI, set
upgrade-mode
tolocal-only
. -
Repeat the steps above on the second FortiGate.
-
Go to System > HA and verify that the HA is formed and synchronized.
-
-
Attempt to upgrade the FortiGate cluster from FortiManager.
-
Go to Device Manager > Device & Groups > Managed FortiGate > Dashboard: Summary, and verify that the cluster is in Local Only HA Upgrade Mode.
-
Go to Device Manager > Device & Groups > Managed FortiGate, select the device and click More > Firmware Upgrade and try to perform a direct upgrade of the firmware. A warning message is displayed denying the firmware upgrade of the MVC enabled HA cluster.
-
Go to Device Manager > Firmware Templates, and try to assign the device to a firmware template. A warning message is displayed stating that firmware upgrades for MVC-enabled HA clusters is not allowed.
-