How Do I Select The Secondary Firewall n GUI For HA?

[Network_Engineer]

Hello

When I go to the GUI for my HA Firewall, only the HA:Primary firewall will appear.

How do I go to the secondary HA Firewall?

In Palo Alto, I can assign an ip address for the primary firewall (e.g 1.1.1.1), another ip adress (e.g. 1.1.1.2)for the secondary firewall and a virtual ip address for the cluster (eg. 1.1.1.3).

So if I want to go to the secondary firewall to check I can go to 1.1.1.2.

Can I do something similar for fortigate firewall?

[Network_Engineer · Accepted solution]

# execute ha manage 1/0  <admin-username>

[Toshi_Esumi]

We just had this conversion:
https://community.fortinet.com/t5/Fortinet-Forum/GUI-into-HA2/td-p/209560

Toshi

[aahmadzada]

Hi,

Please check this one:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-HA-Reserved-Management-Interface/ta-p/1901...

[Network_Engineer · Accepted solution]

# execute ha manage 1/0  <admin-username>

[ede_pfau · Accepted solution]

@Network_Engineer: the CLI command you posted will open a telnet session across the HA link, from one cluster member to the other. This is nice if you don't have HA mgmt addresses configured - it's more of a workaround.

In general, you would create those HA mgmt addresses and use them for GUI or ssh access.