config system ha
Description: Configure HA.
set group-id {integer}
set group-name {string}
set mode [standalone|a-a|...]
set sync-packet-balance [enable|disable]
set password {password}
set key {password}
set hbdev {user}
set frup [enable|disable]
config frup-settings
Description: FRUP settings
set active-interface <name1>, <name2>, ...
set backup-interface <name1>, <name2>, ...
set active-switch-port {option1}, {option2}, ...
end
set session-sync-dev {user}
set route-ttl {integer}
set route-wait {integer}
set route-hold {integer}
set multicast-ttl {integer}
set load-balance-all [enable|disable]
set sync-config [enable|disable]
set encryption [enable|disable]
set authentication [enable|disable]
set hb-interval {integer}
set hb-lost-threshold {integer}
set hello-holddown {integer}
set gratuitous-arps [enable|disable]
set arps {integer}
set arps-interval {integer}
set session-pickup [enable|disable]
set session-pickup-connectionless [enable|disable]
set session-pickup-expectation [enable|disable]
set session-pickup-nat [enable|disable]
set session-pickup-delay [enable|disable]
set link-failed-signal [enable|disable]
set uninterruptible-upgrade [enable|disable]
set standalone-mgmt-vdom [enable|disable]
set ha-mgmt-status [enable|disable]
config ha-mgmt-interfaces
Description: Reserve interfaces to manage individual cluster units.
edit <id>
set interface {string}
set dst {ipv4-classnet}
set gateway {ipv4-address}
set gateway6 {ipv6-address}
next
end
set ha-eth-type {string}
set hc-eth-type {string}
set l2ep-eth-type {string}
set ha-uptime-diff-margin {integer}
set standalone-config-sync [enable|disable]
set logical-sn [enable|disable]
set vcluster2 [enable|disable]
set vcluster-id {integer}
set override [enable|disable]
set priority {integer}
set override-wait-time {integer}
set schedule [none|hub|...]
set weight {user}
set cpu-threshold {user}
set memory-threshold {user}
set http-proxy-threshold {user}
set ftp-proxy-threshold {user}
set imap-proxy-threshold {user}
set nntp-proxy-threshold {user}
set pop3-proxy-threshold {user}
set smtp-proxy-threshold {user}
set monitor {user}
set pingserver-monitor-interface {user}
set pingserver-failover-threshold {integer}
set pingserver-slave-force-reset [enable|disable]
set pingserver-flip-timeout {integer}
set vdom {user}
config secondary-vcluster
Description: Configure virtual cluster 2.
set vcluster-id {integer}
set override [enable|disable]
set priority {integer}
set override-wait-time {integer}
set monitor {user}
set pingserver-monitor-interface {user}
set pingserver-failover-threshold {integer}
set pingserver-slave-force-reset [enable|disable]
set vdom {user}
end
set ha-direct [enable|disable]
set ssd-failover [enable|disable]
set memory-compatible-mode [enable|disable]
set inter-cluster-session-sync [enable|disable]
end| Parameter Name | Description | Type | Size |
|---|---|---|---|
| group-id | Cluster group ID (0 - 255). Must be the same for all members. | integer | Minimum value: 0 Maximum value: 255 |
| group-name | Cluster group name. Must be the same for all members. | string | Maximum length: 32 |
| mode | HA mode. Must be the same for all members. FGSP requires standalone. standalone: Standalone mode. a-a: Active-active mode. a-p: Active-passive mode. |
option | - |
| sync-packet-balance | Enable/disable HA packet distribution to multiple CPUs. enable: Enable HA packet distribution to multiple CPUs. disable: Disable HA packet distribution to multiple CPUs. |
option | - |
| password | Cluster password. Must be the same for all members. | password | Not Specified |
| key | key | password | Not Specified |
| hbdev | Heartbeat interfaces. Must be the same for all members. | user | Not Specified |
| frup | Enable/disable Fortinet Redundant UTM Protocol enable: Enable setting. disable: Disable setting. |
option | - |
| session-sync-dev | Offload session-sync process to kernel and sync sessions using connected interface(s) directly. | user | Not Specified |
| route-ttl | TTL for primary unit routes (5 - 3600 sec). Increase to maintain active routes during failover. | integer | Minimum value: 5 Maximum value: 3600 |
| route-wait | Time to wait before sending new routes to the cluster (0 - 3600 sec). | integer | Minimum value: 0 Maximum value: 3600 |
| route-hold | Time to wait between routing table updates to the cluster (0 - 3600 sec). | integer | Minimum value: 0 Maximum value: 3600 |
| multicast-ttl | HA multicast TTL on master (5 - 3600 sec). | integer | Minimum value: 5 Maximum value: 3600 |
| load-balance-all | Enable to load balance TCP sessions. Disable to load balance proxy sessions only. enable: Enable load balance. disable: Disable load balance. |
option | - |
| sync-config | Enable/disable configuration synchronization. enable: Enable configuration synchronization. disable: Disable configuration synchronization. |
option | - |
| encryption | Enable/disable heartbeat message encryption. enable: Enable heartbeat message encryption. disable: Disable heartbeat message encryption. |
option | - |
| authentication | Enable/disable heartbeat message authentication. enable: Enable heartbeat message authentication. disable: Disable heartbeat message authentication. |
option | - |
| hb-interval | Time between sending heartbeat packets (1 - 20 (100*ms)). Increase to reduce false positives. | integer | Minimum value: 1 Maximum value: 20 |
| hb-lost-threshold | Number of lost heartbeats to signal a failure (1 - 60). Increase to reduce false positives. | integer | Minimum value: 1 Maximum value: 60 |
| hello-holddown | Time to wait before changing from hello to work state (5 - 300 sec). | integer | Minimum value: 5 Maximum value: 300 |
| gratuitous-arps | Enable/disable gratuitous ARPs. Disable if link-failed-signal enabled. enable: Enable gratuitous ARPs. disable: Disable gratuitous ARPs. |
option | - |
| arps | Number of gratuitous ARPs (1 - 60). Lower to reduce traffic. Higher to reduce failover time. | integer | Minimum value: 1 Maximum value: 60 |
| arps-interval | Time between gratuitous ARPs (1 - 20 sec). Lower to reduce failover time. Higher to reduce traffic. | integer | Minimum value: 1 Maximum value: 20 |
| session-pickup | Enable/disable session pickup. Enabling it can reduce session down time when fail over happens. enable: Enable session pickup. disable: Disable session pickup. |
option | - |
| session-pickup-connectionless | Enable/disable UDP and ICMP session sync. enable: Enable setting. disable: Disable setting. |
option | - |
| session-pickup-expectation | Enable/disable session helper expectation session sync for FGSP. enable: Enable setting. disable: Disable setting. |
option | - |
| session-pickup-nat | Enable/disable NAT session sync for FGSP. enable: Enable setting. disable: Disable setting. |
option | - |
| session-pickup-delay | Enable to sync sessions longer than 30 sec. Only longer lived sessions need to be synced. enable: Enable setting. disable: Disable setting. |
option | - |
| link-failed-signal | Enable to shut down all interfaces for 1 sec after a failover. Use if gratuitous ARPs do not update network. enable: Enable setting. disable: Disable setting. |
option | - |
| uninterruptible-upgrade | Enable to upgrade a cluster without blocking network traffic. enable: Enable setting. disable: Disable setting. |
option | - |
| standalone-mgmt-vdom | Enable/disable standalone management VDOM. enable: Enable setting. disable: Disable setting. |
option | - |
| ha-mgmt-status | Enable to reserve interfaces to manage individual cluster units. enable: Enable setting. disable: Disable setting. |
option | - |
| ha-eth-type | HA heartbeat packet Ethertype (4-digit hex). | string | Maximum length: 4 |
| hc-eth-type | Transparent mode HA heartbeat packet Ethertype (4-digit hex). | string | Maximum length: 4 |
| l2ep-eth-type | Telnet session HA heartbeat packet Ethertype (4-digit hex). | string | Maximum length: 4 |
| ha-uptime-diff-margin | Normally you would only reduce this value for failover testing. | integer | Minimum value: 1 Maximum value: 65535 |
| standalone-config-sync | Enable/disable FGSP configuration synchronization. enable: Enable setting. disable: Disable setting. |
option | - |
| logical-sn | Enable/disable usage of the logical serial number. enable: Enable usage of the logical serial number. disable: Disable usage of the logical serial number. |
option | - |
| vcluster2 | Enable/disable virtual cluster 2 for virtual clustering. enable: Enable setting. disable: Disable setting. |
option | - |
| vcluster-id | Cluster ID. | integer | Minimum value: 0 Maximum value: 255 |
| override | Enable and increase the priority of the unit that should always be primary (master). enable: Enable setting. disable: Disable setting. |
option | - |
| priority | Increase the priority to select the primary unit (0 - 255). | integer | Minimum value: 0 Maximum value: 255 |
| override-wait-time | Delay negotiating if override is enabled (0 - 3600 sec). Reduces how often the cluster negotiates. | integer | Minimum value: 0 Maximum value: 3600 |
| schedule | Type of A-A load balancing. Use none if you have external load balancers. none: None. hub: Hub. leastconnection: Least connection. round-robin: Round robin. weight-round-robin: Weight round robin. random: Random. ip: IP. ipport: IP port. |
option | - |
| weight | Weight-round-robin weight for each cluster unit. Syntax |
user | Not Specified |
| cpu-threshold | Dynamic weighted load balancing CPU usage weight and high and low thresholds. | user | Not Specified |
| memory-threshold | Dynamic weighted load balancing memory usage weight and high and low thresholds. | user | Not Specified |
| http-proxy-threshold | Dynamic weighted load balancing weight and high and low number of HTTP proxy sessions. | user | Not Specified |
| ftp-proxy-threshold | Dynamic weighted load balancing weight and high and low number of FTP proxy sessions. | user | Not Specified |
| imap-proxy-threshold | Dynamic weighted load balancing weight and high and low number of IMAP proxy sessions. | user | Not Specified |
| nntp-proxy-threshold | Dynamic weighted load balancing weight and high and low number of NNTP proxy sessions. | user | Not Specified |
| pop3-proxy-threshold | Dynamic weighted load balancing weight and high and low number of POP3 proxy sessions. | user | Not Specified |
| smtp-proxy-threshold | Dynamic weighted load balancing weight and high and low number of SMTP proxy sessions. | user | Not Specified |
| monitor | Interfaces to check for port monitoring (or link failure). | user | Not Specified |
| pingserver-monitor-interface | Interfaces to check for remote IP monitoring. | user | Not Specified |
| pingserver-failover-threshold | Remote IP monitoring failover threshold (0 - 50). | integer | Minimum value: 0 Maximum value: 50 |
| pingserver-slave-force-reset | Enable to force the cluster to negotiate after a remote IP monitoring failover. enable: Enable force reset of slave after PING server failure. disable: Disable force reset of slave after PING server failure. |
option | - |
| pingserver-flip-timeout | Time to wait in minutes before renegotiating after a remote IP monitoring failover. | integer | Minimum value: 6 Maximum value: 2147483647 |
| vdom | VDOMs in virtual cluster 1. | user | Not Specified |
| ha-direct | Enable/disable using ha-mgmt interface for syslog, SNMP, remote authentication (RADIUS), FortiAnalyzer, and FortiSandbox. enable: Enable using ha-mgmt interface for syslog, SNMP, remote authentication (RADIUS), FortiAnalyzer, FortiManager and FortiSandbox. disable: Disable using ha-mgmt interface for syslog, SNMP, remote authentication (RADIUS), FortiAnalyzer, FortiManager and FortiSandbox. |
option | - |
| ssd-failover | Enable/disable automatic HA failover on SSD disk failure. enable: Enable setting. disable: Disable setting. |
option | - |
| memory-compatible-mode | Enable/disable memory compatible mode. enable: Enable setting. disable: Disable setting. |
option | - |
| inter-cluster-session-sync | Enable/disable synchronization of sessions among HA clusters. enable: Enable synchronization of sessions among HA clusters. disable: Disable synchronization of sessions among HA clusters. |
option | - |
| Parameter Name | Description | Type | Size |
|---|---|---|---|
active-interface <name> |
FRUP active interface Interface name. |
string | Maximum length: 15 |
backup-interface <name> |
FRUP backup interface Interface name. |
string | Maximum length: 15 |
| active-switch-port | FRUP active switch port list 1: switch port number 2: switch port number 3: switch port number 4: switch port number 5: switch port number 6: switch port number 7: switch port number 8: switch port number 9: switch port number 10: switch port number 11: switch port number 12: switch port number 13: switch port number 14: switch port number 15: switch port number 16: switch port number 17: switch port number 18: switch port number 19: switch port number 20: switch port number 21: switch port number 22: switch port number 23: switch port number 24: switch port number 25: switch port number 26: switch port number 27: switch port number 28: switch port number 29: switch port number 30: switch port number 31: switch port number 32: switch port number 33: switch port number 34: switch port number 35: switch port number 36: switch port number |
option | - |
| Parameter Name | Description | Type | Size |
|---|---|---|---|
| interface | Interface to reserve for HA management. | string | Maximum length: 15 |
| dst | Default route destination for reserved HA management interface. | ipv4-classnet | Not Specified |
| gateway | Default route gateway for reserved HA management interface. | ipv4-address | Not Specified |
| gateway6 | Default IPv6 gateway for reserved HA management interface. | ipv6-address | Not Specified |
| Parameter Name | Description | Type | Size |
|---|---|---|---|
| vcluster-id | Cluster ID. | integer | Minimum value: 0 Maximum value: 255 |
| override | Enable and increase the priority of the unit that should always be primary (master). enable: Enable setting. disable: Disable setting. |
option | - |
| priority | Increase the priority to select the primary unit (0 - 255). | integer | Minimum value: 0 Maximum value: 255 |
| override-wait-time | Delay negotiating if override is enabled (0 - 3600 sec). Reduces how often the cluster negotiates. | integer | Minimum value: 0 Maximum value: 3600 |
| monitor | Interfaces to check for port monitoring (or link failure). | user | Not Specified |
| pingserver-monitor-interface | Interfaces to check for remote IP monitoring. | user | Not Specified |
| pingserver-failover-threshold | Remote IP monitoring failover threshold (0 - 50). | integer | Minimum value: 0 Maximum value: 50 |
| pingserver-slave-force-reset | Enable to force the cluster to negotiate after a remote IP monitoring failover. enable: Enable force reset of slave after PING server failure. disable: Disable force reset of slave after PING server failure. |
option | - |
| vdom | VDOMs in virtual cluster 2. | user | Not Specified |
config system ha
Description: Configure HA.
set group-id {integer}
set group-name {string}
set mode [standalone|a-a|...]
set sync-packet-balance [enable|disable]
set password {password}
set key {password}
set hbdev {user}
set frup [enable|disable]
config frup-settings
Description: FRUP settings
set active-interface <name1>, <name2>, ...
set backup-interface <name1>, <name2>, ...
set active-switch-port {option1}, {option2}, ...
end
set session-sync-dev {user}
set route-ttl {integer}
set route-wait {integer}
set route-hold {integer}
set multicast-ttl {integer}
set load-balance-all [enable|disable]
set sync-config [enable|disable]
set encryption [enable|disable]
set authentication [enable|disable]
set hb-interval {integer}
set hb-lost-threshold {integer}
set hello-holddown {integer}
set gratuitous-arps [enable|disable]
set arps {integer}
set arps-interval {integer}
set session-pickup [enable|disable]
set session-pickup-connectionless [enable|disable]
set session-pickup-expectation [enable|disable]
set session-pickup-nat [enable|disable]
set session-pickup-delay [enable|disable]
set link-failed-signal [enable|disable]
set uninterruptible-upgrade [enable|disable]
set standalone-mgmt-vdom [enable|disable]
set ha-mgmt-status [enable|disable]
config ha-mgmt-interfaces
Description: Reserve interfaces to manage individual cluster units.
edit <id>
set interface {string}
set dst {ipv4-classnet}
set gateway {ipv4-address}
set gateway6 {ipv6-address}
next
end
set ha-eth-type {string}
set hc-eth-type {string}
set l2ep-eth-type {string}
set ha-uptime-diff-margin {integer}
set standalone-config-sync [enable|disable]
set logical-sn [enable|disable]
set vcluster2 [enable|disable]
set vcluster-id {integer}
set override [enable|disable]
set priority {integer}
set override-wait-time {integer}
set schedule [none|hub|...]
set weight {user}
set cpu-threshold {user}
set memory-threshold {user}
set http-proxy-threshold {user}
set ftp-proxy-threshold {user}
set imap-proxy-threshold {user}
set nntp-proxy-threshold {user}
set pop3-proxy-threshold {user}
set smtp-proxy-threshold {user}
set monitor {user}
set pingserver-monitor-interface {user}
set pingserver-failover-threshold {integer}
set pingserver-slave-force-reset [enable|disable]
set pingserver-flip-timeout {integer}
set vdom {user}
config secondary-vcluster
Description: Configure virtual cluster 2.
set vcluster-id {integer}
set override [enable|disable]
set priority {integer}
set override-wait-time {integer}
set monitor {user}
set pingserver-monitor-interface {user}
set pingserver-failover-threshold {integer}
set pingserver-slave-force-reset [enable|disable]
set vdom {user}
end
set ha-direct [enable|disable]
set ssd-failover [enable|disable]
set memory-compatible-mode [enable|disable]
set inter-cluster-session-sync [enable|disable]
end| Parameter Name | Description | Type | Size |
|---|---|---|---|
| group-id | Cluster group ID (0 - 255). Must be the same for all members. | integer | Minimum value: 0 Maximum value: 255 |
| group-name | Cluster group name. Must be the same for all members. | string | Maximum length: 32 |
| mode | HA mode. Must be the same for all members. FGSP requires standalone. standalone: Standalone mode. a-a: Active-active mode. a-p: Active-passive mode. |
option | - |
| sync-packet-balance | Enable/disable HA packet distribution to multiple CPUs. enable: Enable HA packet distribution to multiple CPUs. disable: Disable HA packet distribution to multiple CPUs. |
option | - |
| password | Cluster password. Must be the same for all members. | password | Not Specified |
| key | key | password | Not Specified |
| hbdev | Heartbeat interfaces. Must be the same for all members. | user | Not Specified |
| frup | Enable/disable Fortinet Redundant UTM Protocol enable: Enable setting. disable: Disable setting. |
option | - |
| session-sync-dev | Offload session-sync process to kernel and sync sessions using connected interface(s) directly. | user | Not Specified |
| route-ttl | TTL for primary unit routes (5 - 3600 sec). Increase to maintain active routes during failover. | integer | Minimum value: 5 Maximum value: 3600 |
| route-wait | Time to wait before sending new routes to the cluster (0 - 3600 sec). | integer | Minimum value: 0 Maximum value: 3600 |
| route-hold | Time to wait between routing table updates to the cluster (0 - 3600 sec). | integer | Minimum value: 0 Maximum value: 3600 |
| multicast-ttl | HA multicast TTL on master (5 - 3600 sec). | integer | Minimum value: 5 Maximum value: 3600 |
| load-balance-all | Enable to load balance TCP sessions. Disable to load balance proxy sessions only. enable: Enable load balance. disable: Disable load balance. |
option | - |
| sync-config | Enable/disable configuration synchronization. enable: Enable configuration synchronization. disable: Disable configuration synchronization. |
option | - |
| encryption | Enable/disable heartbeat message encryption. enable: Enable heartbeat message encryption. disable: Disable heartbeat message encryption. |
option | - |
| authentication | Enable/disable heartbeat message authentication. enable: Enable heartbeat message authentication. disable: Disable heartbeat message authentication. |
option | - |
| hb-interval | Time between sending heartbeat packets (1 - 20 (100*ms)). Increase to reduce false positives. | integer | Minimum value: 1 Maximum value: 20 |
| hb-lost-threshold | Number of lost heartbeats to signal a failure (1 - 60). Increase to reduce false positives. | integer | Minimum value: 1 Maximum value: 60 |
| hello-holddown | Time to wait before changing from hello to work state (5 - 300 sec). | integer | Minimum value: 5 Maximum value: 300 |
| gratuitous-arps | Enable/disable gratuitous ARPs. Disable if link-failed-signal enabled. enable: Enable gratuitous ARPs. disable: Disable gratuitous ARPs. |
option | - |
| arps | Number of gratuitous ARPs (1 - 60). Lower to reduce traffic. Higher to reduce failover time. | integer | Minimum value: 1 Maximum value: 60 |
| arps-interval | Time between gratuitous ARPs (1 - 20 sec). Lower to reduce failover time. Higher to reduce traffic. | integer | Minimum value: 1 Maximum value: 20 |
| session-pickup | Enable/disable session pickup. Enabling it can reduce session down time when fail over happens. enable: Enable session pickup. disable: Disable session pickup. |
option | - |
| session-pickup-connectionless | Enable/disable UDP and ICMP session sync. enable: Enable setting. disable: Disable setting. |
option | - |
| session-pickup-expectation | Enable/disable session helper expectation session sync for FGSP. enable: Enable setting. disable: Disable setting. |
option | - |
| session-pickup-nat | Enable/disable NAT session sync for FGSP. enable: Enable setting. disable: Disable setting. |
option | - |
| session-pickup-delay | Enable to sync sessions longer than 30 sec. Only longer lived sessions need to be synced. enable: Enable setting. disable: Disable setting. |
option | - |
| link-failed-signal | Enable to shut down all interfaces for 1 sec after a failover. Use if gratuitous ARPs do not update network. enable: Enable setting. disable: Disable setting. |
option | - |
| uninterruptible-upgrade | Enable to upgrade a cluster without blocking network traffic. enable: Enable setting. disable: Disable setting. |
option | - |
| standalone-mgmt-vdom | Enable/disable standalone management VDOM. enable: Enable setting. disable: Disable setting. |
option | - |
| ha-mgmt-status | Enable to reserve interfaces to manage individual cluster units. enable: Enable setting. disable: Disable setting. |
option | - |
| ha-eth-type | HA heartbeat packet Ethertype (4-digit hex). | string | Maximum length: 4 |
| hc-eth-type | Transparent mode HA heartbeat packet Ethertype (4-digit hex). | string | Maximum length: 4 |
| l2ep-eth-type | Telnet session HA heartbeat packet Ethertype (4-digit hex). | string | Maximum length: 4 |
| ha-uptime-diff-margin | Normally you would only reduce this value for failover testing. | integer | Minimum value: 1 Maximum value: 65535 |
| standalone-config-sync | Enable/disable FGSP configuration synchronization. enable: Enable setting. disable: Disable setting. |
option | - |
| logical-sn | Enable/disable usage of the logical serial number. enable: Enable usage of the logical serial number. disable: Disable usage of the logical serial number. |
option | - |
| vcluster2 | Enable/disable virtual cluster 2 for virtual clustering. enable: Enable setting. disable: Disable setting. |
option | - |
| vcluster-id | Cluster ID. | integer | Minimum value: 0 Maximum value: 255 |
| override | Enable and increase the priority of the unit that should always be primary (master). enable: Enable setting. disable: Disable setting. |
option | - |
| priority | Increase the priority to select the primary unit (0 - 255). | integer | Minimum value: 0 Maximum value: 255 |
| override-wait-time | Delay negotiating if override is enabled (0 - 3600 sec). Reduces how often the cluster negotiates. | integer | Minimum value: 0 Maximum value: 3600 |
| schedule | Type of A-A load balancing. Use none if you have external load balancers. none: None. hub: Hub. leastconnection: Least connection. round-robin: Round robin. weight-round-robin: Weight round robin. random: Random. ip: IP. ipport: IP port. |
option | - |
| weight | Weight-round-robin weight for each cluster unit. Syntax |
user | Not Specified |
| cpu-threshold | Dynamic weighted load balancing CPU usage weight and high and low thresholds. | user | Not Specified |
| memory-threshold | Dynamic weighted load balancing memory usage weight and high and low thresholds. | user | Not Specified |
| http-proxy-threshold | Dynamic weighted load balancing weight and high and low number of HTTP proxy sessions. | user | Not Specified |
| ftp-proxy-threshold | Dynamic weighted load balancing weight and high and low number of FTP proxy sessions. | user | Not Specified |
| imap-proxy-threshold | Dynamic weighted load balancing weight and high and low number of IMAP proxy sessions. | user | Not Specified |
| nntp-proxy-threshold | Dynamic weighted load balancing weight and high and low number of NNTP proxy sessions. | user | Not Specified |
| pop3-proxy-threshold | Dynamic weighted load balancing weight and high and low number of POP3 proxy sessions. | user | Not Specified |
| smtp-proxy-threshold | Dynamic weighted load balancing weight and high and low number of SMTP proxy sessions. | user | Not Specified |
| monitor | Interfaces to check for port monitoring (or link failure). | user | Not Specified |
| pingserver-monitor-interface | Interfaces to check for remote IP monitoring. | user | Not Specified |
| pingserver-failover-threshold | Remote IP monitoring failover threshold (0 - 50). | integer | Minimum value: 0 Maximum value: 50 |
| pingserver-slave-force-reset | Enable to force the cluster to negotiate after a remote IP monitoring failover. enable: Enable force reset of slave after PING server failure. disable: Disable force reset of slave after PING server failure. |
option | - |
| pingserver-flip-timeout | Time to wait in minutes before renegotiating after a remote IP monitoring failover. | integer | Minimum value: 6 Maximum value: 2147483647 |
| vdom | VDOMs in virtual cluster 1. | user | Not Specified |
| ha-direct | Enable/disable using ha-mgmt interface for syslog, SNMP, remote authentication (RADIUS), FortiAnalyzer, and FortiSandbox. enable: Enable using ha-mgmt interface for syslog, SNMP, remote authentication (RADIUS), FortiAnalyzer, FortiManager and FortiSandbox. disable: Disable using ha-mgmt interface for syslog, SNMP, remote authentication (RADIUS), FortiAnalyzer, FortiManager and FortiSandbox. |
option | - |
| ssd-failover | Enable/disable automatic HA failover on SSD disk failure. enable: Enable setting. disable: Disable setting. |
option | - |
| memory-compatible-mode | Enable/disable memory compatible mode. enable: Enable setting. disable: Disable setting. |
option | - |
| inter-cluster-session-sync | Enable/disable synchronization of sessions among HA clusters. enable: Enable synchronization of sessions among HA clusters. disable: Disable synchronization of sessions among HA clusters. |
option | - |
| Parameter Name | Description | Type | Size |
|---|---|---|---|
active-interface <name> |
FRUP active interface Interface name. |
string | Maximum length: 15 |
backup-interface <name> |
FRUP backup interface Interface name. |
string | Maximum length: 15 |
| active-switch-port | FRUP active switch port list 1: switch port number 2: switch port number 3: switch port number 4: switch port number 5: switch port number 6: switch port number 7: switch port number 8: switch port number 9: switch port number 10: switch port number 11: switch port number 12: switch port number 13: switch port number 14: switch port number 15: switch port number 16: switch port number 17: switch port number 18: switch port number 19: switch port number 20: switch port number 21: switch port number 22: switch port number 23: switch port number 24: switch port number 25: switch port number 26: switch port number 27: switch port number 28: switch port number 29: switch port number 30: switch port number 31: switch port number 32: switch port number 33: switch port number 34: switch port number 35: switch port number 36: switch port number |
option | - |
| Parameter Name | Description | Type | Size |
|---|---|---|---|
| interface | Interface to reserve for HA management. | string | Maximum length: 15 |
| dst | Default route destination for reserved HA management interface. | ipv4-classnet | Not Specified |
| gateway | Default route gateway for reserved HA management interface. | ipv4-address | Not Specified |
| gateway6 | Default IPv6 gateway for reserved HA management interface. | ipv6-address | Not Specified |
| Parameter Name | Description | Type | Size |
|---|---|---|---|
| vcluster-id | Cluster ID. | integer | Minimum value: 0 Maximum value: 255 |
| override | Enable and increase the priority of the unit that should always be primary (master). enable: Enable setting. disable: Disable setting. |
option | - |
| priority | Increase the priority to select the primary unit (0 - 255). | integer | Minimum value: 0 Maximum value: 255 |
| override-wait-time | Delay negotiating if override is enabled (0 - 3600 sec). Reduces how often the cluster negotiates. | integer | Minimum value: 0 Maximum value: 3600 |
| monitor | Interfaces to check for port monitoring (or link failure). | user | Not Specified |
| pingserver-monitor-interface | Interfaces to check for remote IP monitoring. | user | Not Specified |
| pingserver-failover-threshold | Remote IP monitoring failover threshold (0 - 50). | integer | Minimum value: 0 Maximum value: 50 |
| pingserver-slave-force-reset | Enable to force the cluster to negotiate after a remote IP monitoring failover. enable: Enable force reset of slave after PING server failure. disable: Disable force reset of slave after PING server failure. |
option | - |
| vdom | VDOMs in virtual cluster 2. | user | Not Specified |