HA graceful upgrade to FortiOS 6.2.9
Use the following steps to upgrade a FortiGate-6000 or 7000E HA cluster with uninterruptible-upgrade enabled from FortiOS 6.0.13 or 6.2.7 to FortiOS 6.2.9.
|
FortiOS 6.2.9 increases the FortiGate-7121F boot partition size. This change allows the FortiGate-7121F to support larger more complex configurations that include more VDOMs and firewall policies. Because of the boot partition size increase, the process of upgrading a FortiGate-7121F to 6.2.9 Build 1206 is a manual process that will take longer than normal and during this time the FortiGate-7121F will not be able to process traffic. As well, graceful upgrade to FortiOS 6.2.9 is not supported for a FortiGate-7121F FGCP cluster. Instead you must change the FortiGate-7121Fs to operate as standalone FortiGates and upgrade each one separately before reforming the cluster. To upgrade a FortiGate-7121F to FortiOS 6.2.9, see Upgrading a FortiGate-7121F to FortiOS 6.2.9. |
Enabling uninterruptible-upgrade allows you to upgrade the firmware of an operating FortiGate-6000 or 7000 HA configuration with only minimal traffic interruption. During the upgrade, the secondary FortiGate upgrades first. Then a failover occurs and the newly upgraded FortiGate becomes the primary FortiGate and the firmware of the new secondary FortiGate upgrades.
To perform a graceful upgrade of your FortiGate-6000 or 7000 from FortiOS 6.0.13 or 6.2.7 to FortiOS 6.2.9:
-
Use the following command to enable uninterruptible-upgrade to support HA graceful upgrade:
config system ha
set uninterruptible-upgrade enable
end
-
Download FortiOS 6.2.9 firmware for FortiGate-6000 or 7000 from the https://support.fortinet.com FortiGate-6K7K 6.2.9 firmware image folder.
-
Perform a normal upgrade of your HA cluster using the downloaded firmware image file.
-
Verify that you have installed the correct firmware version. For example, for the FortiGate-6301F:
get system status Version: FortiGate-6301F v6.2.9,build1206,211112 (GA) ...