HA in-band management for management interfaces

The FortiGate 7000E now supports FGCP HA in-band management for FortiGate 7000E management interfaces and the management interface LAG.

HA in-band management allows you to add a second management IP address to one or more FortiGate 7000E management interfaces. The management IP address is accessible from the network that the interface is connected to. This setting is not synchronized, so each FortiGate 7000E in the cluster can have their own in-band management IP addresses; providing management access to the secondary FortiGate 7000E.

FortiGate 7000E does not support HA in-band management for data interfaces.

HA in-band management configuration:

config vdom

edit mgmt-vdom

config system interface

edit mgmt

set management-ip <ip address>

end

You can also remove individual mgmt interfaces from the FortiGate 7000E management interface LAG and add an in-band management address to these interfaces.

The management-ip option is available only when HA is enabled.

To support HA in-band management, the FortiGate 7000E handles Cluster virtual MAC addresses in the same way as other FortiGates.