system ha-mgmt-router-policy

Use this command to configure a policy route used exclusively by an individual high availability (HA) cluster member in Active-Passive (AP) or Standard Active-Active (AAS) mode.

This command does not apply to High Volume Active-Active (AAH) mode. In an AAH cluster, network synchronization is disabled between the primary and secondary nodes to allow each member independent control over its network routing.

For appliances in an AP or AAS HA group, configurations defined via config router policy and config router static synchronize across all group members. Conversely, configurations defined via config system ha-mgmt-router-static or config system ha-mgmt-router-policy apply solely to the specific local member. This local routing mechanism allows you to connect a specific cluster member to backend servers or management networks outside the shared server pool of the HA group.

To use this command, your administrator account’s access control profile must have rw or w permission to the sysgrp area. For details, see Permissions.

Syntax

config system ha-mgmt-router-policy

edit <policy_index>

set iif "<incoming_interface_name>"

set src "<source_ip>"

set dst "<destination_ip>"

set oif "<outgoing_interface_name>"

set gateway "<router_ip>"

set priority <priorty_int>

next

end

Variable	Description	Default
<policy_index>	Enter the index number of the policy route. The valid range is 0–65,535.	No default.
"<incoming_interface_name>"	Enter the name of the interface, such as port1, on which FortiWeb receives packets it applies this routing policy to.	No default.
src "<source_ip>"	Enter the source IP address and netmask to match, separated with a space. FortiWeb routes matching traffic through the specified interface and gateway.	0.0.0.0 0.0.0.0
dst "<destination_ip>"	Enter the destination IP address and netmask to match, separated with a space. FortiWeb routes matching traffic through the specified interface and gateway.	0.0.0.0 0.0.0.0
"<outgoing_interface_name>"	Enter the name of the interface, such as port2, through which FortiWeb routes packets that match the specified IP address information.	No default.
gateway "<router_ip>"	Enter the IP address of a next-hop router. A gateway address is not required for the particular routing policies used as static routes in an one-arm topology. Leave this blank for a one-arm network topology.	0.0.0.0
priority <priorty_int>	Enter a value between 1 and 200 that specifies the priority of the route. When packets match more than one policy route, FortiWeb directs traffic to the route with the lowest value.	200