FortiProxy
FortiProxy provides enterprise-class protection against internet-borne threats and Advanced Web Content Caching
ametkola
Staff
Staff
Article Id 300789
Description This article describes how to fix an issue where the in-band management IP does not respond to SSH, ping, or HTTPS.
Scope Models affected: FortiProxy.
Solution

A FortiProxy cluster configured with management IP does not respond in 7.2.x and 7.4.x, and the same FortiProxy units cannot be accessed via the GUI using the management IP.

 

The in-band management IP does not respond to SSH, ping, or HTTPS.

 

show

config system interface

edit "port1"

set vdom "root"

set management-ip 192.168.10.11 255.255.255.0

set ip 192.168.10.10 255.255.255.0

set allowaccess ping https ssh fgfm

set type physical

set snmp-index 1

next

end

 

show

config system interface

edit "port1"

set vdom "root"

set management-ip 192.168.10.12 255.255.255.0

set ip 192.168.10.10 255.255.255.0

set allowaccess ping https ssh fgfm

set type physical

set snmp-index 1

next

end


dia sniffer packet any "host 192.168.10.11" 4
interfaces=[any]
filters=[host 192.168.10.11]
10.128762 port1 in 192.168.10.2.48542 -> 192.168.10.11.22: syn 1342628645
11.162211 port1 in 192.168.10.2.48542 -> 192.168.10.11.22: syn 1342628645
13.174161 port1 in 192.168.10.2.48542 -> 192.168.10.11.22: syn 1342628645
17.430083 port1 in 192.168.10.2.48542 -> 192.168.10.11.22: syn 1342628645
25.622005 port1 in 192.168.10.2.48542 -> 192.168.10.11.22: syn 1342628645

 

To provide direct management access to all cluster units, a management interface can be reserved as part of the HA configuration.
After the management interface is reserved, the various interface settings, such as the IP address and administrative access, can be configured for each individual cluster unit.

 

See the documentation. If this feature is required, a new feature request can be raised to support this behavior.