HA graceful upgrade to FortiOS 6.0.12
Use the following steps to upgrade a FortiGate-6000 or 7000 HA cluster with uninterruptible-upgrade
enabled from FortiOS 6.0.10 build 0372 to FortiOS 6.0.12 Build 0386.
Enabling uninterruptible-upgrade
allows you to upgrade the firmware of an operating FortiGate-6000 or 7000 HA cluster with only minimal traffic interruption. During the upgrade, the secondary FortiGate upgrades first. Then a failover occurs and the newly upgraded FortiGate becomes the primary FortiGate and the firmware of the new secondary FortiGate upgrades.
To perform a graceful upgrade of your FortiGate-6000 or 7000 from FortiOS 6.0.10 to FortiOS 6.0.12:
-
Use the following commands to enable
uninterruptible-upgrade
to support HA graceful upgrade:config system ha
set session-pickup enable
set uninterruptible-upgrade enable
end
-
Download the FortiGate-6000 or 7000 FortiOS 6.0.12 Build 0386 image file from the https://support.fortinet.com FortiGate-6K7K 6.0.12 firmware image folder.
-
Perform a normal upgrade of your HA cluster.
-
Wait a few minutes, and when the upgrade is complete, verify that you have installed the correct interim firmware version. For example, for the FortiGate-6301F:
get system status Version: FortiGate-6301F v6.0.12,build0386,210526 (GA) ...