Skip to main content
HS08
Valued Contributor
Feb 18, 2026 3:29 AM UTC
Question

LDAP Authentication

I login to the fortigate web admin using my LDAP User and here my config. Everything is working fine, i able to log on to the Firewall. But when i upgrade the firmware on primary firewall then when secondary firewall take over then i can't login using LDAP users. 

If i remove set source-ip then both firewall able to login. Anyone know why?

IP 10.202.151.1 is interface on Fortigate which connected to the LAN (Core Switch)

 

FW01 (AD) # show
config user ldap
edit "AD"
set server "10.203.248.31"
set source-ip "10.202.151.1"
set cnid "sAMAccountName"
set dn "dc=mydomain,dc=id"
set type regular
set username "mydomain\\admin.forti"
set password ENC xxxxxxxxxxxxx
next
end

3 replies

mpapisetty
Staff
Staff
Feb 18, 2026 5:20 AM UTC

Hi @HS08 

Would you mind sharing information on which interface has that source ip of 10.202.151.1? Is it some sort of reserved management interface that is not shared across both cluster units? 

 

HS08
HS08Author
Valued Contributor
Feb 18, 2026 6:54 AM UTC

10.202.151.1 is not mgmt interface but LAN interface so both FGT will have this IP.

tbarua
Staff
Staff
Feb 18, 2026 10:44 AM UTC

Hi HS08, 

 

Please check this kb and cross-check if this issue matches with your case:

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-When-ha-direct-is-enabled-the-source-ip-setting/ta-p/299994

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT