Lost access after converting active-passive ha to standalone

[Zayd]

Hi

I lost access to the web ui of the fortigate fw after changing the ha settings from active-passive to standalone. As soon as i selected standlone and clicked OK, fw starts buffering for sometime and then i lost the web ui and ssh access.

then wento inside DC and connected laptop to mgmt interface in same subnet still web ui inaccessible, via console am able to access the cli and found mgmt interface ip was not present. I set the ip address again and tried accessing which failed. I took a reload of the device but of no use.

Now what can i do further to take the web ui access?

[Toshi_Esumi]

"mgmt" port in standalone by default "dedicated-to management", I believe. Or opposite and a-p/a-a mode's default might be. In either way that might be the reason you've lost IP when you changed the mode.

Toshi

[Zayd]

Hi All,

Today, we have resolved the mgmt access issue of the firewall, after rebooting the firewall.

Also it was found to have a trusted host configured for local admin access.

Additionally, under the HA settings "Management interface reservation" section required to configure with interface as "mgmt" and gateway ip.

Once above done it was accessible as before.

Now i want to know why the HA settings required to have the " "Management interface reservation" configuration and why removing it lost the mgmt access.

[Toshi_Esumi]

Because that's the only place you can configure "dedicated management" network's GW in HA, which shouldn't be there in standalone.

Toshi