Hello all,
Currently running a pair of FortiMail VM02 5.4.0 GA. The cluster is a config master/slave but it tends to go out of sync.
diag sys ha showcsum will show a csum mismatch and when I check closer some entries will be mismatched e.g.
FML1:
917: 4f5e...d0 (name) 513: c2d0...08 (<name>) 513: 48e8...29 (<name>) 513: 7c3e...f5 (<name>) <---- Mismatch 513: d88b...db (<name>) 513: 20e0...a7 (<name>) 513: 54a8...c7 (<name>)
FML2:
917: 4f5e...d0 (name) 513: c2d0...08 (<name>) 513: 48e8...29 (<name>) 513: 5d26...03 (<name>) <---- Mismatch 513: dca9...91 (<name>) 513: 211d...c3 (<name>)
When I try to query this value I am getting error: cmf_query_create error for 513
The second FML will then try multiple reboots but eventually goes out of sync.
This happens quite often after making changes. Is there any way to force a configuration overwrite from the master to all the slaves?
EDIT:
Sorry I forgot to mention that I did the following also to troubleshoot:
- Compare full-config from both FortiMail. There is no difference except things like hostname and IP address.
- Wipe the FML-02 and have it sync to the primary FML-01. Same problem, config goes out of sync after some time with csum mismatch.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1740 | |
1108 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.