FG-1800F ha and mgmt

Question

hi,i received a new FG-1800F and saw there's 2x ha and 2x mgmt ports.my question is, can i just utilize/configure only one of these? i.e. use ha1 and mgmt1 onlyor is there a config guide/design to follow wherein i have to use both? seems it will use a lot of switch ports since we're using A/P HA.what are some common design/scenarios for using two ha and mgmt? # show system interface name    Name.fortilink   static   0.0.0.0 0.0.0.0  10.255.1.1 255.255.255.0  up   disable   aggregate  disable   ha1   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   ha2   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   l2t.root   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   tunnel  disable   mgmt1   static   0.0.0.0 0.0.0.0  192.168.1.99 255.255.255.0  up   disable   physical  disable   mgmt2   static   0.0.0.0 0.0.0.0  192.168.2.99 255.255.255.0  up   disable   physical  disable   modem   pppoe   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  down   disable   physical  disable   naf.root   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   tunnel  disable   port1   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   port2   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   port3   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   port4   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   port5   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   port6   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   port7   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   port8   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   port9   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   port10   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable    <SNIP>

Toshi_Esumi · Accepted Answer

I was talking about HA interfaces like on 100Fs, which has two 1G ports. We use MGMT1 for MGMT but use MGMT2 for HA with 1500D because there is no dedicated HA interface.
I don't see much necessity/added benefit to have two MGMT ports. They're not supposed to carry any user traffic. So not sure FTNT's design concept having two MGMT ports while there is a separate HA port(s).

And 1000F has one MGMT and one HA port only.

Toshi

Toshi_Esumi · Answer

The HA ports are intended to be connected between units directly without going through switches, if possible. Those are for redundancy. So it of course still work even if one of them is down or not connected. But recommended to connect both for redundancy.
For MGMT ports, even if you don't connect both of them because you don't use/need out-of-band management, they should work fine normally.

Toshi

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded