HA graceful upgrade to FortiOS 6.2.13

Use the following steps to upgrade a FortiGate-6000, 7000E, or 7000F FGCP HA cluster with uninterruptible-upgrade enabled from FortiOS 6.2.12 build 1248 to FortiOS 6.2.13 Build 1272. You can also use the following steps to upgrade a FortiGate-6000 or 7000E FGCP HA cluster with uninterruptible-upgrade enabled from FortiOS 6.0.16 build 0416 to FortiOS 6.2.13 Build 1272. FortiGate-7000F is not supported by FortiOS 6.0.x.

FortiOS 6.2.9 increased the FortiGate-7121F boot partition size. If you are running FortiOS 6.2.7 or earlier firmware on your FortiGate-7121F, you must upgrade to FortiOS 6.2.9 using the information in the FortiGate-7000 6.2.9 Release Notes before upgrading to 6.2.13.

Enabling uninterruptible-upgrade allows you to upgrade the firmware of an operating FortiGate-6000 or 7000 HA configuration with only minimal traffic interruption. During the upgrade, the secondary FortiGate upgrades first. Then a failover occurs and the newly upgraded FortiGate becomes the primary FortiGate and the firmware of the new secondary FortiGate upgrades.

To perform a graceful upgrade of your FortiGate-6000 or 7000 FGCP HA cluster from FortiOS 6.2.11 or 6.0.15 to FortiOS 6.2.13:

1. Use the following command to enable uninterruptible-upgrade to support HA graceful upgrade:

   config system ha

   set uninterruptible-upgrade enable

   end

2. Download FortiOS 6.2.13 firmware for FortiGate-6000 or 7000 from the https://support.fortinet.com FortiGate-6K7K 6.2.13 firmware image folder.

3. Perform a normal upgrade of your HA cluster using the downloaded firmware image file.

4. Verify that you have installed the correct firmware version. For example, for the FortiGate-6301F:

   get system status
   Version: FortiGate-6301F v6.2.13,build1272,230225 (GA)
   ...