Fortinet black logo

Administration Guide

FortiManager high availability (HA)

FortiManager high availability (HA)

A FortiManager HA cluster consists of an active master unit, and up to four standby slave units. If the master unit becomes unavailable, one of the standby slaves will become the new master.

In most situations, the FortiPortal provides access to the master FortiManager in the HA cluster. Configuration changes in the master will be synchronized to the slave units. If no master exists, the FortiPortal provides read-only access to the slave units.

When a FortiManager unit with an HA configuration is added to FortiPortal, FortiPortal must be able to reach all the IP addresses that are part of the FortiManager HA cluster (including the slave). If FortiPortal cannot reach the slave IP address, FortiPortal cannot detect the HA switchover.

In the FortiManager table, the Mode includes the following values:

  • Standalone—the FortiManager is independent of a high-availability cluster
  • Master—the FortiManager is the master in a high-availability cluster
  • Slave—the FortiManager is a slave in a high-availability cluster

Select the HA icon to display information about the FortiManagers in this HA cluster:

The Cluster Information page provides the following information for each FortiManager in the cluster:

Field

Description

FortiManager SN

Serial number of the FortiManager

Active

Displays green arrow for an active FortiManager or a red x for an inactive FortiManager

IP Address

IP address of the FortiManager

Role

The role is Master or Slave.

Status

Indicates whether the FortiManager is operational

FortiManager high availability (HA)

A FortiManager HA cluster consists of an active master unit, and up to four standby slave units. If the master unit becomes unavailable, one of the standby slaves will become the new master.

In most situations, the FortiPortal provides access to the master FortiManager in the HA cluster. Configuration changes in the master will be synchronized to the slave units. If no master exists, the FortiPortal provides read-only access to the slave units.

When a FortiManager unit with an HA configuration is added to FortiPortal, FortiPortal must be able to reach all the IP addresses that are part of the FortiManager HA cluster (including the slave). If FortiPortal cannot reach the slave IP address, FortiPortal cannot detect the HA switchover.

In the FortiManager table, the Mode includes the following values:

  • Standalone—the FortiManager is independent of a high-availability cluster
  • Master—the FortiManager is the master in a high-availability cluster
  • Slave—the FortiManager is a slave in a high-availability cluster

Select the HA icon to display information about the FortiManagers in this HA cluster:

The Cluster Information page provides the following information for each FortiManager in the cluster:

Field

Description

FortiManager SN

Serial number of the FortiManager

Active

Displays green arrow for an active FortiManager or a red x for an inactive FortiManager

IP Address

IP address of the FortiManager

Role

The role is Master or Slave.

Status

Indicates whether the FortiManager is operational