Skip to main content
neonbit
neonbit
New Member
December 8, 2015
Question

HA: Changing config on slave replicates to master

  • December 8, 2015
  • 1 reply
  • 11665 views

Hi all,

 

I was testing out some HA features today and ran into something that didn't quite feel right. Hoping to get some feedback if this is expected or not.

 

On two FGT-VM01 devices running 5.2.1, I've configured them into a HA pair with a master (priority 200) and a slave (priority 100).  Everything connects and works fine and each device assumes its correct master/slave status.

 

Next I configured separate management interfaces for each and logged directly into the slave webGUI.

 

I noticed that any changes I made to the slave (like delete/adding policies) was immediately replicated to the master config. I assumed that any changes made on the slave unit should be overwritten by the master as soon as the config was sync'd but this doesn't seem to happen.

 

Does this sound right to you guys?

1 reply

ksm
ksm
New Member
December 21, 2017

Hi all, 

 

this post is old but not answered, so I ask you exactly the same question but now in my context we are in 5.6.3 on a 300 E cluster. I pass by the CLI command "exe ha manage", i go on the slave, change something, and, it is replicated.

I do not understand why, because we are in an active-passive mode.

 

Thanks in advance for enlightening us.

 

Best regards.

 

JS

KERBEROS Support

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
December 21, 2017

First, you should never try changing the config on the slave. I don't think it's designed to react that kind of abnormal situation. I think that's why original post never got a reply.

Then if you still want the answer, open a TT at TAC. They might tell you the same.

ksm
ksm
New Member
December 21, 2017

Hi Toshi,

 

thanks for your quick reply, I will then create a case on FORTINET Support.

 

Best regards.

 

JS

Terms & ConditionsAccessibility statement