Skip to main content
emillandstrom
New Member
September 19, 2016
Solved

Enabling vCluster2

  • September 19, 2016
  • 7 replies
  • 8771 views

Hi,

 

I was wondering how disruptive it is to enable vCluster2 on a production Fortigate installation which is already up and running. Does it affect the existing traffic in any way?

 

Cheers!

Emil

Best answer by emnoc

Enabling the vcluster is not disruptive,  and I have to disagree that it's not enabled by default 

 

As suggested earlier; get sys ha status  | grep vclu will tell you if vcluster#2  is enabled

 

 

7 replies

vjoshi_FTNT
Staff
Staff
September 22, 2016

Hello Emil,

 

Do you have multiple VDOMs in the setup?

If yes, then the vcluster2 is enabled by default.

 

However, you need to configure the secondary-vcluster to add the vdoms to it.

 

Yes, this might cause interruptions to the traffic if you are doing it in a production setup.

 

 

emillandstrom
New Member
September 22, 2016

Hi,

 

Thanks for the reply. Yes, i have 3 VDOMs, 2 out of which (root, vdomx) are handling production traffic at the moment. The third VDOM (vdomy) is not in use right now.

 

I want to configure the VDOM partitioning so that root and vdomx stay active in vcluster 1 (where they are now), and vdomy is active in vcluster 2. 

 

My original query was actually more intended to mean "Will configuring the "secondary-vcluster" parameter disrupt traffic in the primary vcluster?".

 

Cheers!

Emil

 

vjoshi_FTNT
Staff
Staff
September 25, 2016

Hello Emil,

 

I haven't tried this in a production setup, however, logically, it shouldn't impact the traffic if configured properly.

 

You enable the secondary vcluster and the production vdoms should be configured to have the current master as master and the new vdom for the current slave.

 

 

telecosistem
New Member
September 25, 2016

Hello,

What is the operation mode of this vCluster?

Attach the output of this command

"show sys ha"

"drag sys ha status"

Best Regards,

emnoc
emnocAnswer
New Member
September 25, 2016

Enabling the vcluster is not disruptive,  and I have to disagree that it's not enabled by default 

 

As suggested earlier; get sys ha status  | grep vclu will tell you if vcluster#2  is enabled

 

 

emillandstrom
New Member
September 26, 2016

Hi,

 

Just thought I'd report back. I enabled and configured the secondary vcluster (it was NOT enabled as default) and moved the inactive VDOM to it. We did not experience any disruptions to the production traffic.

 

Regards,

Emil

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.