FortiAnalyzer HA , the Purpose of Peer IP , which IP should be use to receive logs Peer IP or VIP?

EvanRaci · ‎08-28-2023

Hi All,

We've configured FortiAnalyzer HA in our environment and have configured Peer IP and Cluster Virtual IP.

From FortiGate to send log to FortiAnalyzer , which interface IP of FAZ should be use ? Cluster Virtual IP or Peer IP ?

Also what is the purpose of peer ip ?

Please help guide on this.

Thank you so much.

kcheng · ‎08-28-2023

Hi @EvanRaci

Please be informed that if you want to access the master unit, you should use the Cluster Virtual IP. That said, if you configure other components to send logs to FAZ, you should also use the Cluster VIP. The peer IP on the other hand, is for the administrator to inform FAZ the IP of the other FAZ unit in the cluster. You may refer to the definitions below:

https://docs.fortinet.com/document/fortianalyzer/7.4.0/administration-guide/275104/configuring-ha-op...

Cheers,
Kayzie Cheng

If you have found a solution, please like and accept it to make it easily accessible for others.

View solution in original post

kcheng · ‎08-28-2023

Hi @EvanRaci

Please be informed that if you want to access the master unit, you should use the Cluster Virtual IP. That said, if you configure other components to send logs to FAZ, you should also use the Cluster VIP. The peer IP on the other hand, is for the administrator to inform FAZ the IP of the other FAZ unit in the cluster. You may refer to the definitions below:

https://docs.fortinet.com/document/fortianalyzer/7.4.0/administration-guide/275104/configuring-ha-op...

Cheers,
Kayzie Cheng

If you have found a solution, please like and accept it to make it easily accessible for others.

FortiAnalyzer HA , the Purpose of Peer IP , which IP should be use to receive logs Peer IP or VIP?

Nominate a Forum Post for Knowledge Article Creation