Ping test in Fortigate HA passive

[Jin-Gyu]

Hi

How do Fortigate work if I ping test on passive when HA is a-p mode?

Do packet go directly to destination from passive or via active?

When I do ping test in passive, there are some equipment that appears in the arp table and some that don't.

What are the criteria that appear in arp table?

Thank you.

[kaman]

Hi Jin-Gyu,

Generally, in an HA active-passive cluster, the FortiGate secondary unit does not respond to the ARP requests, and it cannot participate in active communication. Only the primary unit responds with the virtual MAC address.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Understanding-hardware-switch-and-port-gro...:

You can also refer to the document below:

https://community.fortinet.com/t5/Support-Forum/Problems-with-Active-Passive-HA-deployment/m-p/25723....

If you have found a solution, please like and accept it to make it easily accessible to others.

Regards,
Aman

[Jin-Gyu]

Thank you for your answer.
However, what I want to know is that when I ping test from passive to gateway, there are times when it comes up to the arp table and sometimes it doesn't, I'm curious about the cause of this phenomenon.