MGMT IP in Cluster - Overlap?

Question

New to FortiGate, so this may be long-winded way to ask what I want, so bear with me :) IPs and port numbers are changed to generic for the purposes of this post.

I have two 500E devices in an active/standby HA-pair.

My management network is on the subnet 192.168.0/24 and my management switch (to which the management ports of all my devices are connected) is connected to FW Port 1. Port 1 is configured with the IP 192.168.0.254/24 (the devices on my management network have IPs in the 192.168.0/24 subnet and use the .254 address as their gateway). These devices are all contactable and work as desired.

Each FG currently has a HA Management Interface Gateway set and a management port IP set, but these IPs and gateway are incorrect and not used on our network (they were a typo or a misunderstanding when they were set up by a 3rd party).

Can I set the HA Management Interface Gateway as 192.168.0.254 (the same as the interface my management network connects to) and give the Management Interfaces each an IP on the 192.168.0/24 management subnet or does that cause a subnet overlap and a problem? And if so what is the recommended way around it?

Thank you

Markus · Answer

Yes, this is possible and I've this setup with my boxes too. You have to enable overlap subnet...

config system settings set allow-subnet-overlap enable

Then you can set the IPs within the same subnet config system interface

edit "mgmt1" set ip "your IP address and mask" set dedicated-to management

Login to your passive Box -> exe ha manage "node"

config system interface

edit "mgmt1" set ip "your other IP Address and mask" set dedicated-to management

Finally set the ha settings as follows config system ha set ha-mgmt-status enable set ha-mgmt-interface "mgmt1" set ha-mgmt-interface-gateway "your gateway" Best

Sign up

Login with SSO

Login to the community

Login with SSO