Out of band interface for HA peer

[vetterous]

Hello all!

I am attempting to configure an address on each of my peer members within a HA cluster that will not be a shared address (allowing out of band management). My devices are 1500D's running 5.4.3 build1111. I have tried to configure the following:

config system interface

edit "mgmt1"

set ip X.X.X.X 255.255.255.0

set allowaccess ping https ssh http fgfm

end

config system ha

set group-name alpha

set mode a-p

set ha-mgmt-status enable

set ha-mgmt-interface "mgmt1"

set ha-mgmt-interface-gateway X.X.X.X

end

I have made sure the gateway is on the same subnet as the address of the interface, but for whatever reason its like the interface doesn't take the gateway as I can't ping the address. If I configure a static route (without the above, as it won't let you have a static route to an assigned mgmt HA interface), then it works just fine. Is there something I'm missing? I've searched around (which is how I got the above commands, I have all of a few hours of training on fortigates....), but so far no luck =(. Thanks for any help anyone can offer!

[vetterous]

Think I found my issue.... For some reason if I assign the address to the interface BEFORE I set the mgmt. interface gateway, I have to reboot for it to take effect. If I assign the gateway before I set the ip on the interface, then it seems to work right away. Just posting this in case anyone else has the same issue.

[bgp179]

I have a 1500D on 5.4.3 and its configured the same exact way and it works (although we are running VDOMs).  Are you sure its not something on the network?  Can you plug a laptop directly into the mgmt1 port on same subnet and ping it?