Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
theOtherPadawan
New Contributor II

FortiADC HA Both Primary/No Peers

Anyone have an issue setting up an active-passive HA on FortiADC where both devices want to be Primary?
Neither see any peers.

Mac address spoofing is enabled on our virtual switches.
The thing that's weird is a 169.x.x.x IP is being assigned.
The devices cannot ping the other 169.x.x.x IP. 

 

 

(P) FORTIADCP001 # get system ha
mode                          : active-passive
hbdev                         : port4 
datadev                       : 
group-id                      : 14
group-name                    : group1
mgmt-status                   : disable
priority                      : 1
config-priority               : 10
override                      : enable
hb-interval                   : 2
arps                          : 5
hb-lost-threshold             : 6
arps-interval                 : 6
l7-persistence-pickup         : enable
l4-persistence-pickup         : enable
l4-session-pickup             : enable
auto-config-sync              : enable
monitor                       : port6 
remote-ip-monitor             : disable
boot-time                     : 30
ha-eth-type                   : 8890
hatrans-eth-type              : 8892
l2ep-eth-type                 : 8893
hb-type                       : multicast
 
(P) FORTIADCP001 # get system ha-status
Group ID: 14
Mode: active-passive
State: Primary
Config-Sync Source: N/A
Config-Sync: N/A
Init Done: Yes
Serial-Number: blah blah
Node Id: 0
IP Address: 169.x.x.x
MAC Address: blah blah
Last Change Time: Thu Jul 11 08:00:17 2024
Last Change Reason: Device initialization
 
Monitor Status
  System
    Harddisk: pass
  Link
    Up: port6
    Down:
 
Sync statistics:
                                           Sent           Received
L4 session and persistence sync pkts:      0              0
L7 persistence sync pkts:                  0              0
 
Device management errors:
Duplicate node id:     0
Image Version mismatch:      0
HA Version mismatch:      0
Group id mismatch:      0
Ha mode mismatch:      0
Ha node list mismatch:      0
Duplicate SN:      0
Basic Errors:      0
 
Peer Count: 0
 
(P) FORTIADCP001 #  



(P) FORTIADCP002 # get system ha
mode                          : active-passive
hbdev                         : port4 
datadev                       : 
group-id                      : 14
group-name                    : group1
mgmt-status                   : disable
priority                      : 9
config-priority               : 100
override                      : enable
hb-interval                   : 2
arps                          : 5
hb-lost-threshold             : 6
arps-interval                 : 6
l7-persistence-pickup         : enable
l4-persistence-pickup         : enable
l4-session-pickup             : enable
auto-config-sync              : enable
monitor                       : port6 
remote-ip-monitor             : disable
boot-time                     : 30
ha-eth-type                   : 8890
hatrans-eth-type              : 8892
l2ep-eth-type                 : 8893
hb-type                       : multicast
 
(P) FORTIADCP002 # get system ha-status
Group ID: 14
Mode: active-passive
State: Primary
Config-Sync Source: N/A
Config-Sync: N/A
Init Done: Yes
Serial-Number: blah blah
Node Id: 0
IP Address: 169.x.x.x
MAC Address: blah blah
Last Change Time: Thu Jul 11 08:00:33 2024
Last Change Reason: Device initialization
 
Monitor Status
  System
    Harddisk: pass
  Link
    Up: port6
    Down:
 
Sync statistics:
                                           Sent           Received
L4 session and persistence sync pkts:      0              0
L7 persistence sync pkts:                  0              0
 
Device management errors:
Duplicate node id:     0
Image Version mismatch:      0
HA Version mismatch:      0
Group id mismatch:      0
Ha mode mismatch:      0
Ha node list mismatch:      0
Duplicate SN:      0
Basic Errors:      0
 
Peer Count: 0
 
(P) FORTIADCP002 #  

 

1 Solution
theOtherPadawan
New Contributor II

For those having the same issue.

Disabling igmp snooping on our physical network switches (for just the HA vlan), resolved the issue for us. 

View solution in original post

3 REPLIES 3
Anthony_E
Community Manager
Community Manager

Hello,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Anthony-Fortinet Community Team.
theOtherPadawan
New Contributor II

For those having the same issue.

Disabling igmp snooping on our physical network switches (for just the HA vlan), resolved the issue for us. 

Anthony_E
Community Manager
Community Manager

Thanks a lot for sharing the solution!

Anthony-Fortinet Community Team.
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors