Skip to main content
azhunissov
Staff
azhunissov
Staff
August 7, 2019

Technical Tip: 'ping-options source' not shown in CLI on secondary FortiGate in HA cluster

  • August 7, 2019
  • 0 replies
  • 18736 views

Description

 

This article describes why the ping-options source command is not available on the CLI of a FortiGate unit that is part of a High Availability (HA) cluster.

 

Scope

 

FortiGate.

Solution


When a FortiGate device is a member of an HA cluster, the secondary (backup) unit does not support the ping-options source parameter, regardless of whether the cluster is operating in active-active or active-passive mode.

For example, in an HA active-passive setup with two FortiGates:

  • FGT-1 is the primary (primary) unit.
  • FGT-2 is the secondary (secondary) unit.

 

The ping-options source command will only be available on the primary unit. This is expected behavior due to HA role restrictions.

 
HA ping-source.drawio.png
 
FGT-1 (root) # diagnose  sys  ha  status HA information Statistics traffic.local = s:0 p:14933 b:8628586 traffic.total = s:0 p:15838 b:9744220 activity.ha_id_changes = 3 activity.fdb  = c:0 q:0  Model=80005, Mode=2 Group=100 Debug=0 nvcluster=1, ses_pickup=0, delay=0  [Debug_Zone HA information] HA group member information: is_manage_primary=1. FGVM01TM25005667:      Primary, serialno_prio=1, usr_priority=130, hostname=FGT-1 FGVM01TM25005735:    Secondary, serialno_prio=0, usr_priority=128, hostname=FGT-2  [Kernel HA information] vcluster 1, state=work, primary_ip=169.254.0.2, primary_id=0, silent=0 FGVM01TM25005667:      Primary, ha_prio/o_ha_prio=0/0 FGVM01TM25005735:    Secondary, ha_prio/o_ha_prio=1/1 Silent vcluster bitmap=00000000000000000000000000000000
 
FGT-1 (primary):
 
FGT-1 (root) # execute ping-options adaptive-ping     Adaptive ping <enable|disable>. data-size         Integer value to specify datagram size in bytes. df-bit            Set DF bit in IP header <yes | no>. interface         Auto | <outgoing interface>. interval          Integer value to specify seconds between two pings. pattern           Hex format of pattern, e.g. 00ffaabb. repeat-count      Integer value to specify how many times to repeat PING. reset             Reset settings. source            Auto | <source interface IP>. timeout           Integer value to specify timeout in seconds. tos               IP type-of-service option. ttl               Integer value to specify time-to-live. use-sdwan         Use SD-WAN rules to get output interface <yes | no>. validate-reply    Validate reply data <yes | no>. view-settings     View the current settings for PING option. vrf               VRF ID.
 
FGT-2 (secondary):
 
FGT-2 (root) # execute ping-options adaptive-ping     Adaptive ping <enable|disable>. data-size         Integer value to specify datagram size in bytes. df-bit            Set DF bit in IP header <yes | no>. interval          Integer value to specify seconds between two pings. pattern           Hex format of pattern, e.g. 00ffaabb. repeat-count      Integer value to specify how many times to repeat PING. reset             Reset settings. timeout           Integer value to specify timeout in seconds. tos               IP type-of-service option. ttl               Integer value to specify time-to-live. use-sdwan         Use SD-WAN rules to get output interface <yes | no>. validate-reply    Validate reply data <yes | no>. view-settings     View the current settings for PING option.
Terms & ConditionsAccessibility statement