diagnose debug application sessionsync level

[boneyard]

anyone with experience on the diagnose debug for sessionsync (FGSP)?

i tried the -1 on 7.2.8 and think I once saw the sync packets on the output, but at the moment I don't see anything when the system is working normally and session sync is working. when i run a resync all command with diagnose test application sessionsync 9 I do get some output, but not during normal operations.

another debug level perhaps? i did try a few, but couldn't get any other output to show.

[mriswan]

Hello @boneyard ,

Have you tried the below debugs?

diag debug enable
diag debug console timestamp enable
diag debug application hasync -1
diag debug application hatalk -1

Also, check when was the last time hasync happened using the command "get system ha status"

[boneyard]

thanks will give that a try, but isnt that more for FGCP then FGSP?

[mriswan]

Hello @boneyard , Sorry my bad. The commands I shared are for FGCP.

Are you seeing the sync session counts incrementing on the get system ha status output?
https://community.fortinet.com/t5/FortiGate/Technical-Tip-FGSP-Configuration-Guide-for-Session-Sync-...

[boneyard]

no as this is FGSP cluster between two standalone firewalls.

it is working, but I am wondering about the lack of debug output for the

diagnose debug application sessionsync -1

command, is that expected.

[Shashwati]

Hello, yes debug for the FGSP is diagnose debug application sessionsync -1

https://community.fortinet.com/t5/FortiGate/Troubleshooting-TIp-FGSP-session-synchronization-ignored...

[boneyard]

yeah, im aware of that, the question is what I can expect. with it enabled im not seeing any output when FGSP is sending session sync packets.