Fortigate - HA questions

anru · ‎03-16-2012

Hi all, I have two FG 310B configured in HA Active-Active (FG1 priority 255, FG2 priority 128). First question: why every day I receive the message from FG2 " The sync status with the master" sync_type=external-files sync_status=out-of-sync" ? Second question: why traffic is not balanced between the two FG, but it prefers FG1 (e.g. total traffic is 70Mbps - 50Mbps flows through FG1 and 20 Mbps through FG2)? Thanks all!

Carl_Wallmark · ‎03-16-2012

Hi, the " sync_status=out-of-sync" is a bug, i think this shows up when the fortigates synced their databases, and during this the databases are out of sync. Not all traffic is loadbalanced, there are some types of traffic that is always handled by the master, read the HA document at http://docs.fortinet.com

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

greenieofdubbo · ‎04-11-2012

i see this error too, hopefully they fix it.