which is HA master/primary or slave/secondary ?

[BensonLEI]

Hi, guys,

We have a pair Forti100F HA devices with FortiOS v6.4.4.

I am confusing between the master-slave in HA structure, as the attached;

1. which is master/primary or slave/secondary ?

2. Is it necessary to identify which is real master ( first device online  @initilzation configuration ) ?

3. what is HA cluster index ?

4. what is HA operating  cluster index ?

Many thanks 

[BensonLEI]

Question is solved:

Troubleshooting Note : FortiGate HA synchronization messages and cluster verification steps (fortine...

FGT300-5 (global) # get system ha status

Model: 300 Mode: a-p Group: 30 Debug: 0 ses_pickup: disable Master:200 FGT300-5 FG300A3906550380 0 Slave :128 FGT300-2 FG300A2904500186 1 number of vcluster: 1 vcluster 1: work 169.254.0.1 Master:0 FG300A3906550380 Slave :1 FG300A2904500186

( cluster index = operating index = 0 )

[ede_pfau]

just to augment this:

- no, it does not matter which physical device is master unit at any time. In fact, for Best Practice, I recommend setting the HA priority on all cluster members equal, so as to avoid preferring one. This way, in case of a failover, there will be no failback, causing (some) interruption in traffic/sessions/IPsec tunnels.

The HA status is reported even in the simple

get sys stat

...

Current HA mode: a-p, master
Cluster uptime: 239 days, 20 hours, 22 minutes, 20 seconds
Cluster state change time: 2020-06-06 17:24:53
which in this case is no wonder as I am connected to the cluster address, not a single cluster member. Outside communication of a cluster is always handled by the current master unit (mgmt, syslog, FAZ, email,...)

[BensonLEI]

Hi, ede,

For your recommendation, if HA priority is equal, does the devices frequently flap/switchover ? 

many thanks