FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Description This article explains how to manage individual cluster units with the CLI command 'execute ha manage'.
Solution The following procedure describes how to use SSH to log into the primary unit CLI and from there to use the 'execute ha manage' command to connect to the CLI of any other unit in the cluster. The procedure is very similar if telnet is used, or the GUI dashboard CLI console.
Use the 'execute ha manage' command from the CLI of any cluster unit to log into the CLI of another the cluster unit. Usually, use this command from the CLI of the primary unit to log into the CLI of a subordinate unit. However, if the user is logged into a subordinate unit CLI, the user can use this command to log into the primary unit CLI, or the CLI of another subordinate unit.
Using SSH or telnet or the GUI dashboard CLI console permit to only log into the primary unit CLI. Using a direct console connection log into any cluster unit is possible. In both cases 'execute ha manage' to connect to the CLI of other cluster units is possible.
1) Use SSH to connect to the cluster and log into the primary unit CLI.
Connect to any cluster interface configured for SSH administrative access to log into the cluster.
2) Enter the following command followed by a space and type a question mark (?):
# execute ha manage
The CLI displays a list of all the subordinate units in the cluster. Each cluster unit is numbered, starting at 1. The information displayed for each cluster unit includes the unit serial number and the host name of the unit.
3) Complete the command with the number of the subordinate unit and an administrator account to log into the CLI of the selected subordinate unit to log into. For example, to log into subordinate unit 1, enter the following command:
# execute ha manage 1 admin
'Enter' to connect to and use. If this subordinate unit has a different host name, the CLI prompt changes to this host name.
Use CLI commands to manage this subordinate unit. If any changes to the configuration of any cluster unit are done (primary or subordinate unit) these changes are synchronized to all cluster units.
Now use the 'execute ha manage' command to connect to any other cluster unit (including the primary unit). Use the exit command to return to the primary unit CLI.
