Out of band interface for HA peer
Hello all!
I am attempting to configure an address on each of my peer members within a HA cluster that will not be a shared address (allowing out of band management). My devices are 1500D's running 5.4.3 build1111. I have tried to configure the following:
config system interface
edit "mgmt1"
set ip X.X.X.X 255.255.255.0
set allowaccess ping https ssh http fgfm
end
config system ha
set group-name alpha
set mode a-p
set ha-mgmt-status enable
set ha-mgmt-interface "mgmt1"
set ha-mgmt-interface-gateway X.X.X.X
end
I have made sure the gateway is on the same subnet as the address of the interface, but for whatever reason its like the interface doesn't take the gateway as I can't ping the address. If I configure a static route (without the above, as it won't let you have a static route to an assigned mgmt HA interface), then it works just fine. Is there something I'm missing? I've searched around (which is how I got the above commands, I have all of a few hours of training on fortigates....), but so far no luck =(. Thanks for any help anyone can offer!
