FPM failure

If one or more FPMs in the primary FortiGate-7000E fails, the cluster renegotiates and the FortiGate-7000E with the most operating FPMs becomes the primary FortiGate-7000E. An FPM failure can occur if the FPM shuts down due to a software crash or hardware problem, or if the FPM is manually shut down or even removed from the chassis.

After the primary FortiGate-7000E experiences an FIM failure, the FortiGate-7000E with the most operating FPMs becomes the new primary FortiGate-7000E. The new primary FortiGate-7000E sends gratuitous arp packets out all of its connected interfaces to inform attached switches to send traffic to it. Sessions then resume with the new primary FortiGate-7000E.

If the secondary FortiGate-7000E experiences an FPM failure, its status in the cluster does not change. However, in future negotiations the FortiGate-7000E with an FPM failure is less likely to become the primary FortiGate-7000E.