FortiManager-HA automatic failover enhancement
This feature introduces automatic failover for FortiManager-HA.
To use automatic failover for FortiManager-HA:
- In FortiManager, go to System Settings > HA.
A new Failover Mode setting is available in the FortiManager HA configuration menu. You can select Manual for manual failover or VRRP to enable automatic failover. - Select VRRP as the Failover Mode, and configure the other settings required including the VIP, VRRP Interface, Priority, Unicast, and Monitored IP.
- When the monitored interface for the Primary FortiManager is unreachable or down, HA automatic failover will occur, and the Secondary FortiManager will automatically become the primary.
To configure automatic failover in the FortiManager CLI:
- On the Primary FortiManager, configure the FortiManager settings with VRRP mode selected:
config system ha
set failover-mode vrrp
config monitored-ips
edit 1
set interface <string>
set ip <string>
next
end
config peer
edit <peer_id_int>
set ip <peer_ipv4_address>
set serial-number <string>
next
end
set priority <integer>
set vip <string>
set vrrp-interface <string>
end
For example:
config system ha
set failover-mode vrrp
config monitored-ips
edit 1
set interface "port2"
set ip "192.168.48.63"
next
end
config peer
edit 1
set ip 10.3.106.64
set serial-number "FMG-VM0A17001234"
next
end
set priority 200
set vip "10.3.106.65"
set vrrp-interface "port1"
end
- On the Secondary FortiManager, configure the FortiManager settings with VRRP mode selected:
config system ha
set failover-mode vrrp
config monitored-ips
edit <id>
set interface <string>
set ip <string>
next
end
config peer
edit <peer_id_int>
set ip <peer_ipv4_address>
set serial-number <string>
next
end
set vip <string>
set vrrp-interface <string>
end
For example:
config system ha
set failover-mode vrrp
config monitored-ips
edit 1
set interface "port2"
set ip "192.168.48.64"
next
end
config peer
edit 1
set ip 10.3.106.63
set serial-number "FMG-VM0A16001234"
next
end
set vip "10.3.106.65"
set vrrp-interface "port1"
end