Skip to main content
emillandstrom
New Member
Sep 19, 2016 1:18 PM UTC
Solved

Enabling vCluster2

Hi,

 

I was wondering how disruptive it is to enable vCluster2 on a production Fortigate installation which is already up and running. Does it affect the existing traffic in any way?

 

Cheers!

Emil

emnoc
emnocAnswer
New Member
Sep 25, 2016 6:06 PM UTC

Enabling the vcluster is not disruptive,  and I have to disagree that it's not enabled by default 

 

As suggested earlier; get sys ha status  | grep vclu will tell you if vcluster#2  is enabled

 

 

7 replies

vjoshi_FTNT
Staff
Staff
Sep 22, 2016 6:42 AM UTC

Hello Emil,

 

Do you have multiple VDOMs in the setup?

If yes, then the vcluster2 is enabled by default.

 

However, you need to configure the secondary-vcluster to add the vdoms to it.

 

Yes, this might cause interruptions to the traffic if you are doing it in a production setup.

 

 

emillandstrom
New Member
Sep 22, 2016 6:51 AM UTC

Hi,

 

Thanks for the reply. Yes, i have 3 VDOMs, 2 out of which (root, vdomx) are handling production traffic at the moment. The third VDOM (vdomy) is not in use right now.

 

I want to configure the VDOM partitioning so that root and vdomx stay active in vcluster 1 (where they are now), and vdomy is active in vcluster 2. 

 

My original query was actually more intended to mean "Will configuring the "secondary-vcluster" parameter disrupt traffic in the primary vcluster?".

 

Cheers!

Emil

 

vjoshi_FTNT
Staff
Staff
Sep 25, 2016 7:43 AM UTC

Hello Emil,

 

I haven't tried this in a production setup, however, logically, it shouldn't impact the traffic if configured properly.

 

You enable the secondary vcluster and the production vdoms should be configured to have the current master as master and the new vdom for the current slave.

 

 

telecosistem
New Member
Sep 25, 2016 5:54 PM UTC

Hello,

What is the operation mode of this vCluster?

Attach the output of this command

"show sys ha"

"drag sys ha status"

Best Regards,

emnoc
emnocAnswer
New Member
Sep 25, 2016 6:06 PM UTC

Enabling the vcluster is not disruptive,  and I have to disagree that it's not enabled by default 

 

As suggested earlier; get sys ha status  | grep vclu will tell you if vcluster#2  is enabled

 

 

emillandstrom
New Member
Sep 26, 2016 7:32 AM UTC

Hi,

 

Just thought I'd report back. I enabled and configured the secondary vcluster (it was NOT enabled as default) and moved the inactive VDOM to it. We did not experience any disruptions to the production traffic.

 

Regards,

Emil

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT