FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ChrisTan
Staff
Staff
Article Id 406189
Description This article describes how to use and configure the ping server in an HA virtual cluster environment
Scope FortiGate.
Solution

The HA ping server needs to enable a link monitor or SD-WAN health check.

 

config system link-monitor
    edit "L_M_Port1"
        set srcintf "port1"
        set server "8.8.8.8"
        set ha-priority 5
    next
end

 

Or:

 

config health-check
    edit "HA-monitor"
        set server "8.8.8.8"
        set ha-priority 5
        set members 1,2
    next
end

 

The interface will be visible in HA:

 

FGT(ha) # set pingserver-monitor-interface
monitor interfaces that has ping server enabled:

port1 interface
port2 interface

 

The 'pingserver-monitor-interface' cannot be found if a virtual cluster is enabled in a multi-vdom environment.

 

2025-08-13_14h09_00.png

 

This is because the ping server will determine which device is the primary at the virtual cluster level, so 'pingserver-monitor-interface' has been moved to the virtual cluster settings.

 

FGT(ha) # config vcluster
FGT(vcluster) # edit 1

FGT # set pingserver-monitor-interface
monitor interfaces that has ping server enabled:

port1 interface
port2 interface

 

The monitor interface above can be a physical interface or an  SD-WAN zone.

 

Related articles:

Technical Tip: Combining Remote Link Monitoring with FGCP cluster High Availability

Technical Tip: HA Remote IP Monitoring

Technical Tip: SD-WAN interface as HA ping server monitor interface

Contributors