IBM Cloud Docs
Rebuilding a High Availability (HA) vFSA cluster

Rebuilding a High Availability (HA) vFSA cluster

You can rebuild a High Availability (HA) IBM Cloud® Virtual FortiGate Security Appliance cluster by using the information here.

Rebuilding an HA vFSA cluster is a destructive procedure, and should be used only in a few specific scenarios. Consult your IBM Support representative before you begin this procedure.

For a successful rebuild of a cluster on an HA vFSA, make sure that you have met the following requirements:

  • Do not modify the vFSA configuration during the execution of the Rebuild Cluster operations. Examples include automated software agents attempting to modify one or both vFSA nodes. Configurations changes can corrupt the Rebuild Cluster operation.

  • The admin password for the provisioned vFSA gateway must match the admin password that is defined in the vFSA portal. The password in the portal was defined when the gateway was first provisioned, and might not match the current gateway password. If the password was changed after the initial provisioning, then use SSH to connect to the vFSA gateway and change the admin password to match or change the password in the vFSA portal to match. After the passwords match, you can proceed with the Rebuild Cluster operation.

  • The host passwords must match the passwords in the vFSA portal. In addition, the host OS must enable root SSH access to the vFSA Private IP before doing a rebuild cluster.

Rebuilding an HA cluster

To rebuild one of your HA vFSA clusters, follow these steps:

  1. From your browser, open the IBM Cloud console and log in to your account.
  2. Select the Menu icon Menu icon from the upper left, then click Classic Infrastructure.
  3. Choose Network > Gateway Appliances.
  4. Click the server that you want to reload.
  5. Click the server name in the Hardware section.
  6. Click the Actions menu and select Rebuild Cluster.
  7. Carefully read the warning message. The operation to rebuild a cluster is destructive. If you want to proceed, save your vFSA configuration before you click Rebuild to start the process.