Problem with vdom ha-mgmt-interface mgmt

[josemusante1]

Hello i have a problem when i set ha-mgmt-status with port mgmt1

I set vdom root in fg vm v 7.0 in this port but i cant port with the ip i assigned to this pruporse.

FortiGate-VM64-KVM # show system interface mgmt1
config system interface
edit "mgmt1"
set ip 192.168.25.3 255.255.255.0
set allowaccess ping ssh http
set type aggregate
set lldp-transmission enable
set snmp-index 25
next
end

FortiGate-VM64-KVM #

FortiGate-VM64-KVM # execute ping 192.168.25.3
PING 192.168.25.3 (192.168.25.3): 56 data bytes
64 bytes from 192.168.25.3: icmp_seq=0 ttl=255 time=0.6 ms
64 bytes from 192.168.25.3: icmp_seq=1 ttl=255 time=0.1 ms
64 bytes from 192.168.25.3: icmp_seq=2 ttl=255 time=0.2 ms
64 bytes from 192.168.25.3: icmp_seq=3 ttl=255 time=0.1 ms
64 bytes from 192.168.25.3: icmp_seq=4 ttl=255 time=0.0 ms

--- 192.168.25.3 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 0.0/0.2/0.6 ms

ortiGate-VM64-KVM # show system ha
config system ha
set group-name "HA-GROUP"
set mode a-p
set hbdev "port3" 50 "port15" 100
set session-pickup enable
set ha-mgmt-status enable
config ha-mgmt-interfaces
edit 1
set interface "mgmt1"
set gateway 192.168.25.1
next
end
set override disable
set priority 180
set monitor "port3" "port1"
end

FortiGate-VM64-KVM #

FortiGate-VM64-KVM # execute ping 192.168.25.3
PING 192.168.25.3 (192.168.25.3): 56 data bytes

--- 192.168.25.3 ping statistics ---
5 packets transmitted, 0 packets received, 100% packet loss

FortiGate-VM64-KVM #

Any recommendation

Thanks

[dingjerry_FTNT]

Hi @josemusante1 ,

Once you add the mgmt1 interface as the ha-mgmt-interface, it will be added into the hidden HA VDOM. So I don't think that you can ping it from FGT directly.  

You can prove this by running "get router info routing-table all" to see whether there is any entry for 192.168.25.0/24.

Please ping 192.168.25.3 from the 192.168.25.0 subnet, not from FGT itself.

[dingjerry_FTNT · Accepted solution]

Hi @josemusante1 ,

Please check this KB for more detailed info:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-HA-Reserved-Management-Interface-s-hidden-...