Skip to main content
fortired213413
fortired213413
Explorer III
November 27, 2024
Solved

FGT HA

  • November 27, 2024
  • 5 replies
  • 1581 views

I'm facing issue while accessing the sec box

I tried taking the direct mgmt connection but im not able to ping nor access the sec fgt

 

though the primary box works fine

Best answer by sjoshi

Hi,

 

It is expected that you wont be able to ping or access the Passive device in A-P setup on FGT

If you run :-

get router info routing-table all

you will not see any route on the routing table and if you make the same box primary then it works

5 replies

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
November 27, 2024

What is the model of your FGT? Are you using the built-in MGMT/MGMT1 port? How did you configured HA and the MGMT port?
Share us those config under "config sys int" then "edit mgmt(1)", and "config sys ha" in CLI.

Toshi

dingjerry_FTNT
Staff
dingjerry_FTNT
Staff
November 27, 2024

Hi @fortired213413 ,

 

Please share your HA configuration and relevant interface configuration.

vbandha
Staff
vbandha
Staff
November 27, 2024

Hello @fortired213413 

If the HA is showing secondary fortigate then you can get access to secondary fortigate via the cli on primary:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-access-secondary-unit-of-HA-cluster-via-CLI/ta-p/198142

 

execute ha manage [ID] [username]

 

Another option is to get direct console access to that fortigate. 

 

Regards,

Varun 

sjoshi
Staff
sjoshiAnswer
Staff
November 28, 2024

Hi,

 

It is expected that you wont be able to ping or access the Passive device in A-P setup on FGT

If you run :-

get router info routing-table all

you will not see any route on the routing table and if you make the same box primary then it works

Thanks, Salon
    dingjerry_FTNT
    Staff
    dingjerry_FTNT
    Staff
    November 28, 2024

    Hi @fortired213413 ,

     

    I am still waiting for your FGT configuration.

     

    But I think that you need direct access to the Secondary FGT device.  If so, what you need is the HA management interface.  

     

    I am not sure what your FGT firmware version is.  Please check this doc and you can also select the FortiOS version in the doc:

     

    https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/313152/out-of-band-management-with-reserved-management-interfaces

    Terms & ConditionsAccessibility statement