Fortinet Document Library

Version:

Version:

Version:

Version:


Table of Contents

FortiGate-7000 Handbook

Download PDF
Copy Link

Primary FortiGate-7000 selection with override disabled (default)

FortiGate-7000 FGCP selects the primary FortiGate-7000 based on standard FGCP primary unit selection and also accounting for the number of failed FPMs. The selection sequence is:

  • At least one active FPM
  • Failed monitored interfaces
  • Failed FPMs
  • Age
  • Device priority
  • Serial number

In most cases and with default settings, if everything is connected and operating normally, the FortiGate-7000 with the highest serial number becomes the primary FortiGate-7000. You can set the device priority higher on one of the FortiGate-7000s if you want it to become the primary FortiGate-7000.

The selection sequence also shows that at least one FPM must be active for a FortiGate-7000 to be selected to be the primary. If at least one FPM is active on each FortiGate-7000, the most important criteria is the number of connected monitored interfaces followed by the number of failed FPMs. So if one or more FPMs fail, if monitored interfaces are not configured or no monitored interface has become disconnected, the primary FortiGate-7000 will be the one with the most active FPMs.

Primary FortiGate-7000 selection with override disabled (default)

FortiGate-7000 FGCP selects the primary FortiGate-7000 based on standard FGCP primary unit selection and also accounting for the number of failed FPMs. The selection sequence is:

  • At least one active FPM
  • Failed monitored interfaces
  • Failed FPMs
  • Age
  • Device priority
  • Serial number

In most cases and with default settings, if everything is connected and operating normally, the FortiGate-7000 with the highest serial number becomes the primary FortiGate-7000. You can set the device priority higher on one of the FortiGate-7000s if you want it to become the primary FortiGate-7000.

The selection sequence also shows that at least one FPM must be active for a FortiGate-7000 to be selected to be the primary. If at least one FPM is active on each FortiGate-7000, the most important criteria is the number of connected monitored interfaces followed by the number of failed FPMs. So if one or more FPMs fail, if monitored interfaces are not configured or no monitored interface has become disconnected, the primary FortiGate-7000 will be the one with the most active FPMs.