Skip to main content
Karoui1989
Explorer
May 21, 2025
Solved

HA Management Interface Reservation

  • May 21, 2025
  • 3 replies
  • 2240 views

Hello experts,

I have a FortiGate Active-Passive cluster (FG-101F) running version 7.2.10.

I configured the mgmt port on the firewall for management purposes.

interface mgmt.jpg
 

In the HA configuration, I wanted to add the mgmt interface under Management Interface Reservation in order to manage each cluster member separately.

However, the mgmt interface does not appear in the list. I also tried to configure it via CLI, but I received an error message indicating that the interface is unavailable.

ha config.jpg

Thank you for your help.

Best answer by saneeshpv_FTNT

@Karoui1989 , This could be also because your "mgmt1" interface is referenced somewhere in the configuration (for example, used in the static route configuration or a policy). You check the reference and delete any reference to this and then you should be able to see them available for "Management Interface reservation" under HA. 

 

Regards,

Saneesh

3 replies

funkylicious
SuperUser
SuperUser
May 21, 2025

hi,

if you want to manage each member separately using the current setup, i would suggest using the set management-ip <> under the mgmt interface for each member and assign a new ip, other than the one already set and then you can use them for invididual tasks/access.

https://docs.fortinet.com/document/fortigate/7.4.7/administration-guide/251230 

"jack of all trades, master of none"
saneeshpv_FTNT
Staff
Staff
May 21, 2025

@Karoui1989 , This could be also because your "mgmt1" interface is referenced somewhere in the configuration (for example, used in the static route configuration or a policy). You check the reference and delete any reference to this and then you should be able to see them available for "Management Interface reservation" under HA. 

 

Regards,

Saneesh

Karoui1989
Explorer
May 21, 2025

problem resolved , thank you so mcuh 

esalija
Staff
Staff
May 21, 2025

@Karoui1989 

 

Please run the below command and check the reference for the mgmt port:

diagnose sys cmdb refcnt show system.interface.name mgmt

 

Please check the KB - https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-Check-Referenced-Objects/ta-p/194815

 

For more details related to HA mgmt interface, check the KB - https://community.fortinet.com/t5/FortiGate/Technical-Tip-HA-Reserved-Management-Interface/ta-p/190132

 

Best regards,

Erlin