User FGT_ha_admin

[#1]

Hello I think I' m having some problems with my current HA config. I have configured a three members cluster of 3000A. ---- Firmware Version Fortigate-3000 2.80,build456,050704 ---- I have got in these Event Logs in the main unit: ---- 1 2006-07-10 11:38:40 information telnet(10.0.0.3) login User FGT_ha_admin login failed from telnet(10.0.0.3) 2 2006-07-10 11:37:51 information telnet(10.0.0.3) login User FGT_ha_admin login failed from telnet(10.0.0.3) 3 2006-07-10 11:37:43 information telnet(10.0.0.3) login User FGT_ha_admin login failed from telnet(10.0.0.3) 4 2006-07-10 11:37:34 information telnet(10.0.0.3) login User FGT_ha_admin login failed from telnet(10.0.0.3) 5 2006-07-10 11:37:15 information GUI(XXXXXXXXX) login User admin login successfully from GUI(XXXXXXXXXX) 6 2006-07-10 11:36:45 information telnet(10.0.0.3) login User FGT_ha_admin login failed from telnet(10.0.0.3) 7 2006-07-10 11:36:36 information telnet(10.0.0.3) login User FGT_ha_admin login failed from telnet(10.0.0.3) 8 2006-07-10 11:36:27 information telnet(10.0.0.3) login User FGT_ha_admin login failed from telnet(10.0.0.3) 9 2006-07-10 11:35:38 information telnet(10.0.0.3) login User FGT_ha_admin login failed from telnet(10.0.0.3) 10 2006-07-10 11:35:29 information telnet(10.0.0.3) login User FGT_ha_admin login failed from telnet(10.0.0.3) 11 2006-07-10 11:35:20 information telnet(10.0.0.3) login User FGT_ha_admin login failed from telnet(10.0.0.3) 12 2006-07-10 11:35:16 notice HA slave became master 13 2006-07-10 11:35:16 notice HA monitored interface internal link ready 14 2006-07-10 11:35:12 notice HA master became slave 15 2006-07-10 11:35:12 warning HA monitored interface internal link failed 16 2006-07-10 07:31:51 information GUI(XXXXXXXX) login User admin login successfully from GUI(XXXXXXXX) ---- in other ---- 1 2006-07-10 11:35:17 notice HA master became slave 2 2006-07-10 11:35:14 information telnet(10.0.0.2) login User FGT_ha_admin login failed from telnet(10.0.0.2) 3 2006-07-10 11:35:14 notice HA slave became master ---- and in the other one ---- 1 2006-07-10 11:35:17 notice HA slave became master 2 2006-07-10 11:35:14 notice HA slave became master ---- I just wanted to know exactly what means each sentence and what happened. which one got the control? is there a way that I can know the exact link that failed? And what about the FGT_ha_admin login failed? Thx for your responses!

[#2]

Francisco, It looks like your HA group password might not match across units. That might be the reason for the " information telnet(10.0.0.3) login User FGT_ha_admin login failed from telnet(10.0.0.3)" message. Try entering the command " get system status" from the console of each device. My bet is that they will all believe that they are the master. In the output of the " get system status" command you will see something to the effect of: Version: Fortigate-XXXX 3.00,buildXXXX (output omitted) Common Criteria mode: disable Current HA mode: a-p, master Distribution: International Branch point: XXX System time: Fri Jul 21 12:24:59 2006 Once you get them talking then one should become the master and the others the slaves. Good luck!