Skip to main content
BensonLEI
New Member
February 1, 2021
Question

which is HA master/primary or slave/secondary ?

  • February 1, 2021
  • 1 reply
  • 7865 views

Hi, guys,

 

We have a pair Forti100F HA devices with FortiOS v6.4.4.

 

I am confusing between the master-slave in HA structure, as the attached;

1. which is master/primary or slave/secondary ?

2. Is it necessary to identify which is real master ( first device online  @initilzation configuration ) ?

3. what is HA cluster index ?

4. what is HA operating  cluster index ?

 

 

Many thanks 

    1 reply

    BensonLEI
    BensonLEIAuthor
    New Member
    February 1, 2021

    Question is solved:

     

    Troubleshooting Note : FortiGate HA synchronization messages and cluster verification steps (fortinet.com)

     

    FGT300-5 (global) # get system ha status

    Model: 300 Mode: a-p Group: 30 Debug: 0 ses_pickup: disable Master:200 FGT300-5 FG300A3906550380 0 Slave :128 FGT300-2 FG300A2904500186 1 number of vcluster: 1 vcluster 1: work 169.254.0.1 Master:0 FG300A3906550380 Slave :1 FG300A2904500186

     

    ( cluster index = operating index = 0 )

    ede_pfau
    SuperUser
    SuperUser
    February 1, 2021

    just to augment this:

    - no, it does not matter which physical device is master unit at any time. In fact, for Best Practice, I recommend setting the HA priority on all cluster members equal, so as to avoid preferring one. This way, in case of a failover, there will be no failback, causing (some) interruption in traffic/sessions/IPsec tunnels.

     

    The HA status is reported even in the simple

    get sys stat

    ...

    Current HA mode: a-p, master
    Cluster uptime: 239 days, 20 hours, 22 minutes, 20 seconds
    Cluster state change time: 2020-06-06 17:24:53
    which in this case is no wonder as I am connected to the cluster address, not a single cluster member. Outside communication of a cluster is always handled by the current master unit (mgmt, syslog, FAZ, email,...)