Upgrading a two-chassis cluster

Use the following multi-step process to upgrade worker firmware in a two-chassis cluster.

1. Log into the primary worker GUI.
2. From the Global System Information dashboard widget beside Firmware Version select Update.

3. Select the new firmware image file and select OK.

   The firmware image file is uploaded and verified then installed on all of the workers in the secondary chassis. The primary chassis continues processing traffic.

   From console connections to the workers in the primary chassis you can see messages indicating that they are waiting for their chassis to become the secondary chassis so that they can upgrade their firmware.

   From console connections to the workers in the secondary chassis you can see them upgrade their firmware and restart.

4. Once all of the workers in the secondary chassis have upgraded their firmware and restarted, log into the primary FortiController CLI and enter the following command to force the primary chassis to become the secondary chassis:

   diagnose system ha force-slave-state by-chassis <delay> <chassis-number>

   For example, if chassis 1 is the primary chassis, enter the following command:

   diagnose system ha force-slave-state by-chassis 10 1

   This command waits 10 seconds, then forces chassis 1 to become the secondary chassis, resulting in chassis 2 becoming the primary chassis.

   The workers in the new primary chassis process all network traffic. And the workers in the new secondary chassis upgrade their firmware.

   The workers in the primary chassis can wait up to 20 minutes to become the secondary chassis and upgrade their firmware. If the primary chassis does not become the secondary chassis within 20 minutes, all worker firmware is restored to the original version.

5. After the firmware on all of the workers is upgraded you should clear the force slave state using the following command:

   diagnose system ha force-slave-state by-chassis clear

6. You can confirm that all of the workers are back in the cluster from the FortiController Load Balance > Status page.

To upgrade two chassis cluster FortiController firmware

This procedure upgrades the firmware running on the FortiControllers in a single operation.

1. Log into the primary FortiController GUI.
2. From the System Information dashboard widget beside Firmware Version select Update.

3. Select the new firmware file and select OK.

   The firmware image file is uploaded and verified then installed on all the FortiControllers. After a few minutes the cluster continues operating.

   You can confirm that all of the FortiControllers and workers are back in the cluster and operating normally from the FortiController Load Balance > Status page.