Technical Tip: Find the primary FIM and FPM of a FortiGate 7000F Series

Description

This article describes how to verify whether a FortiGate 7000F unit is a primary FIM or FPM.

Scope

FortiGate 7000F series.

Solution

FortiGates 7000F are FortiGate chassis equipped with 2 different types of boards: FIM and FPM.

Each chassis is equipped with 2 FIMs and different FPMs. For more information about them, see FortiGate-7000F overview.

For each type of board, there is a primary unit. It is important know the primary unit, because it is normal for FPM primary units to show more CPU consumption. This is because some types of traffic cannot be shared between different FPMs.

Use the following command to determine the Primary FIM and the Primary FPM:

diagnose load-balance status | grep "SN\|Prim"
Slot: 2  Module SN: FIM21FTB25000XXX
  Primary FPM Blade: slot-3
Current slot: 1  Module SN: FIM21FTB21000YYY
  Primary FPM Blade: slot-3

Alternative:

• To only find the Primary FPM:

get system status | grep FPM
FPM Primary: slot-3

• To understand which is the secondary FIM for each member in a FortiGate 7000F Cluster:

get sys ha status
HA Health Status: OK
Model: FortiGate-7000F
 …output omitted…
 Chassis Status: (Local chassis ID: 1)
    Chassis ID 1: Primary Chassis
        Slot ID 1 (FIM21FTB21000XXX): Primary Slot
        Slot ID 2 (FIM21FTB25000YYY): Secondary Slot
Chassis Status: (Local chassis ID: 2)
    Chassis ID 1: Primary Chassis
        Slot ID 1 (FIM21FTB21000VVV): Primary Slot
        Slot ID 2 (FIM21FTB25000ZZZ): Secondary Slot

In clusters with more than two FortiGate 7000F units, the primary and the secondary will be displayed for each one.

To change the primary FIM, execute the following command:

diagnose test application fimhbd 2

To manage a FortiGate 7000F, it is important to be familiar with the admin guide (the link is shared at the beginning of the article), with the fast path of the chassis, and with the FIMs and FPMs the chassis is equipped with.

For example, the architecture for FortiGate 7081F is as follows: FortiGate-7081F fast path architecture.