Technical Tip: How to set HA ping server in virtual cluster

The HA ping server needs to enable a link monitor or SD-WAN health check.

config system link-monitor
    edit "L_M_Port1"
        set srcintf "port1"
        set server "8.8.8.8"
        set ha-priority 5
    next
end

Or:

config health-check
    edit "HA-monitor"
        set server "8.8.8.8"
        set ha-priority 5
        set members 1,2
    next
end

The interface will be visible in HA:

FGT(ha) # set pingserver-monitor-interface
monitor interfaces that has ping server enabled:

port1 interface
port2 interface

The 'pingserver-monitor-interface' cannot be found if a virtual cluster is enabled in a multi-vdom environment.

This is because the ping server will determine which device is the primary at the virtual cluster level, so 'pingserver-monitor-interface' has been moved to the virtual cluster settings.

FGT(ha) # config vcluster
FGT(vcluster) # edit 1

FGT # set pingserver-monitor-interface
monitor interfaces that has ping server enabled:

port1 interface
port2 interface

The monitor interface above can be a physical interface or an  SD-WAN zone.

Related articles:

Technical Tip: Combining Remote Link Monitoring with FGCP cluster High Availability

Technical Tip: HA Remote IP Monitoring

Technical Tip: SD-WAN interface as HA ping server monitor interface