| Solution |
This is an example of Active-Passive Cluster, configured with three FortiGates:
Go to System -> HA
- HA status shows three FortiGates: FW1, FW3, and FW2.
- Role to FW1 as Primary.
- Role to FW3 as Secondary.
- Role to FW2 as Secondary.
Use the CLI command line to know the specific role of each FortiGate.
diagnose sys ha status
FW-INTERNET-1 # diagnose sys ha status
HA information
Statistics
traffic.local = s:0 p:95562928 b:54538724611
traffic.total = s:0 p:95577307 b:54537425492
activity.ha_id_changes = 18
activity.fdb = c:0 q:0
Model=1800, Mode=2 Group=193 Debug=0
nvcluster=1, ses_pickup=1, delay=0
[Debug_Zone HA information]
HA group member information: is_manage_primary=1.
FG180FTKXXXX1129: Primary, serialno_prio=0, usr_priority=210, hostname=FW-INTERNET-1
FG180FTK0XXXX973: Secondary-2, serialno_prio=1, usr_priority=190, hostname=FW-INTERNET-3
FG180FTKXXXX0902: Secondary, serialno_prio=2, usr_priority=200, hostname=FW-INTERNET-2
[Kernel HA information]
vcluster 1, state=work, primary_ip=169.254.0.1, primary_id=0, silent=0
FG180FTKXXXX1129: Primary, ha_prio/o_ha_prio=0/0
FG180FTKXXXX0902: Secondary, ha_prio/o_ha_prio=1/1
FG180FTKXXXX0973: Secondary-2, ha_prio/o_ha_prio=2/2
Silent vcluster bitmap=00000000000000000000000000000000
Where:
- FW-INTERNET-1 - FG180FTKXXXX1129: Primary.
- FW-INTERNET-2 - FG180FTKXXXX0902: Secondary.
- FW-INTERNET-3 - FG180FTKXXXX0973: Secondary-2.
Related document:
Check HA synchronization status
|
