HA

[Baboda]

Hello,

I have an HA Fortigate pair, is there any way by cli to switch from master to slave ?

Regards

[AndreaSoliva]

Hi

the first question is it must be understood how a cluster is confiured and what is the behaviour to failover. From this point of view a cluster failover is done in following way (by standard):

ha.jpg            

You see what are the indications for the cluster to do a failover. What I do always is disable age completly which is the uptime of the cluster (not the uptime of the device). I do not really want age because it is on my perspective stupid. To disable age do following on the master:

                        # config system ha

                        # set override enable

                        # end

This disables "age" completly and is not anymore relevant for a failover. If you use port monitoring and all interfaces are up and running you can now do a failover by priority meanign setting the master to lower priority of slave which means you can do it over Web Mgmt. Interface or by cli using following:

       # config system ha        # set priority [Nummeric figure like 128]        # end

If you like to check first the slave priority over cli and you do  not have a seperated Mgmt. Interface for each node you can connect to the slave through the master over Heartbeat interface doing following on the master:

           # execute ha manage ?            <id>    please input peer box index.            <0>     Subsidary unit [Serial Nr. of Slave[                       Use the ID for the Slave on Master CLI to connect to the Slave:                       # execute ha manage 0

Hope this helps

have fun

Andrea