Configuration name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces. You reference this name in the virtual server pool configuration.

Note: After you initially save the configuration, you cannot edit the name.

• FortiADC SLB: A FortiADC instance.
• Generic Host: A third party ADC or server.

• None—No password.
• TCP MD5SIG—With password, but can not be used if NAT is in between the client and server. This is because, when using the TCP MD5SIG authentication in a network with NAT in between, the IP layer is encrypted. So is every packet. Because the IP address will be changed, the encryption check will always fail.
• Auth Verify—The authentication key is sent to the server after a three-way handshake. The key is encrypted and NAT in between will not affect the authentication.

Enter the password to authenticate key.

Note: This field appears only when TCP MD5SIG or Auth Verify is selected as the authentication type. The password your enter here must match the password configured on the FortiADC appliance in a global sever load-balancing configuration.

IPv4 or IPv6.

Specify the IP address for the FortiADC management interface. This IP address is used for synchronization and also status checks. If the management interface is unreachable, the virtual servers for that FortiADC are excluded from DNS answers.

5858 by default.

Select a data center configuration object. The data center configuration object properties are used to establish the proximity of the servers and the client requests.

Enable/disable auto-sync from the server. Global load balancing will auto-sync the server member when enabled.

Note: When disabling auto-sync, the server member will be cleared and re-synced.

If type is Generic Host, enable/disable health checks for the virtual server list. The health check settings at this configuration level are the parent configuration. When you configure the list, you can specify whether to inherit or override the parent configuration.

Note:This option is available only when Generic Host is selected. See Type above. Health checking is built-in, and you can optionally configure a gateway health check.

• AND—All of the specified health checks must pass for the server to be considered available.
• OR—One of the specified health checks must pass for the server to be considered available.

Select one or more health check configuration objects.

Member

Populate the member list with virtual servers from the local FortiADC configuration. After the list had been populated, you can edit the configuration to add a gateway health check.

Select this option if you want to update the discovered virtual server configuration with the latest configuration information whenever you use the Discover utility (for example, additions or changes to previously discovered configurations).

Unselect this option if you want to preserve the previously discovered configuration and not have it overwritten by the Discover operation.

Must match the virtual server configuration name on the local FortiADC.

IPv4 or IPv6.

Virtual server IP address.

Enable an additional health check: is the gateway beyond the FortiADC reachable?

The list of gateway configuration objects is populated by discovery, but you must select the appropriate one from the list.

If type is Generic Host, enable to inherit the health check settings from the parent configuration. Disable to specify health check settings in this member configuration.

Enable health checking for the virtual server.

Note: This option is available only when Health Check Inherit is disabled. In that case, you can enable this option and configure the Health Check Relationship and Health Check List fields below.

• AND—All of the specified health checks must pass for the server to be considered available.
• OR—One of the specified health checks must pass for the server to be considered available.