Troubleshooting High Availability (HA)

Talking about high availability, we are able to divide this topic into two different aspects:

• Troubleshooting HA clusters

• Troubleshooting virtual clustering

Troubleshooting HA clusters

We can begin troubleshooting an HA cluster using the following steps:

1. Apply a minimal security policy that allows to send traffic through the cluster and verify that the connection is working.

2. We have to create a continuous network traffic through the cluster and then we can try to shut down the primary unit.

3. Network traffic should flow with no interruption.

4. Now we are able to restart the primary unit.

5. We have to check the configuration on the FortiGate devices, to verify that it is the same on all the cluster units.

6. Next step is to verify that all the interfaces are up and connected as required by the configuration.

Additional things to consider when troubleshooting an HA cluster are related to the risks of a split-brain scenario. The split-brain syndrome may occur when all of...