Fortigate A-P Scenario Disable the Subordinate port

Forum|Forum|8 years ago
March 14, 2018
8 replies
11143 views

Hi All,

What will happen if a port on a passivve unit is disabled? Will it be synchronized to the Primary?

Thanks

emnoc

New Member

If you mean disable as in "down or admin" down, than I would assume the master will carry the same. Now why do you want to disable it?

Ken

baylonjmjAuthor

New Member

Hi Ken,

Thanks

yup. doing a set status disable on the port of the subordinate.

So the primary device will synchronise its port status from the Subordinate unit even if the Primary have higher device priority? I want to isolate the slave unit, by just leaving the management and console ports enabled. but no one is on-site to remove the cables.

-Lehac

ede_pfau

SuperUser

First off: don't set the port admin-down! This will set this port down on both HA units, 100% guaranteed!

This is how HA works: all settings are synchronized in near realtime, both from master to slave as well as from slave to master.

If you want to isolate the slave unit then set the HA mode on the slave to 'disable'. You will have to set at least one valid IP address to be further able to manage the unit. Please check this in the HA chapter of the Handbook.

With the slave unit running independently, you can switch off ports as you like.

I can imagine that having identical VIPs on both unit may bring some problems along - YMMV.

Sign up

Login with SSO

Login to the community

Login with SSO