Configuring new deliciated HA heartbeat for Redundancy.

[jomof]

Hello Expert,

I have two 400E in a HA cluster .

We use the default HA ports for Heartbeat interface but had to add redundancy using the lan port.(BR_DATA port8) After reviewing numerous documentation we found that this was not best practice since the lan port is heavy use for data.

I would like to assigned a new deliciated port (24)  to be my  backup heartbeat and remove (BR_DATA (port8) but would need some guidance since this is a production environment. 

Also to configure port 24 as heartbeat port are there any special configuration need prior to it being assigned .

GuyOffice-1 (ha) # show
config system ha
set group-name "trans_amt"
set mode a-p
set password g==????Swdee
set hbdev "ha" 200 "port8" 100
set session-pickup enable
set override disable
set priority 200
set monitor "port8"
end

Thank you

[ozkanaltas]

Hello @jomof ,

A dedicated interface is always suggested for the HA heartbeat interface.

When I reviewed your configuration you have also one more heartbeat interface (HA). Because of that you can remove port8 from the configuration and add Port24.

No need to do a special configuration for that. You just need to make sure that the new cable is connected to the same port to both devices and is up.

[jomof]

Hello @ozkanaltas,

Sorry for the tardy response but this looks okay one more thing since this is production environment will i have any downtime?

Thanks 

Regards

PREVIEW

S

[ozkanaltas · Accepted solution]

Hi @jomof ,

If you don't make any changes to the Ha port on the same time, there will be no interruption. Because FortiGate will still continue communicating on the HA port.

[jomof]

Hello @ozkanaltas ,

Thank you once again for your invaluable help.