Skip to main content
Ahmedaz
Visitor III
May 26, 2024
Solved

Accessing HA secondary via MGMT link and OOB VDOM

  • May 26, 2024
  • 1 reply
  • 1556 views

Hello Engineers

i have 2 601F in HA cluster (Active/Standby).

There is a cable between the OOB-SW to each 601F into the MGMT port on the same VLAN.

i need to access the FortiGate directly , when connect my laptop to the Firewall Primary one in MGMT port i can ping and i can login via GUI ,

BUT, when connect my laptop to the Firewall Secondary one in MGMT port i can`t ping and i can`t login to the GUI also , when i connect my laptop to secondary firewall also disconnect the MGMT port on Primary Firewall .

the another issue is

yesterday, i upgrade the Firmware of firewalls in (HA Mode) when the Primary on reboots the Secondary become the Primary as well as but what i noticed it i can reach internet via VDOM " INTERNET "

BUT, Also i can`t Reach the MGMT IPs of the switches and servers in VDOM " OOB "

After the First firewall finish the Reboot it Becomes the Primary and the i Can Reach the MGMT IPs of the switches and servers.

So i think the issue is between the OOB Switch and the second Firewall

SO And advices to TSHOOT this issue ?

Thanks to all

Best answer by ozkanaltas

Hello @Ahmedaz ,

 

Did you do dedicated management port settings on HA? 

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-dedicated-mgmt-feature-Out-of-band/ta-p/193699

 

 

1 reply

ozkanaltas
Valued Contributor III
May 26, 2024

Hello @Ahmedaz ,

 

Did you do dedicated management port settings on HA? 

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-dedicated-mgmt-feature-Out-of-band/ta-p/193699

 

 

Ahmedaz
AhmedazAuthor
Visitor III
May 26, 2024

NO in HA setting just the HA links , so what should i do ?

 

ozkanaltas
Valued Contributor III
May 26, 2024

Hello @Ahmedaz ,

 

If you want to access each FortiGate GUI, you need a dedicated management configuration. 

 

This document tells how you can configure dedicated management.

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-dedicated-mgmt-feature-Out-of-band/ta-p/193699