Fortinet white logo
Fortinet white logo

CLI Reference

diagnose debug ha

diagnose debug ha

Use this command to display debug information related to High Availability (HA).

You can toggle the any HA debug option (except list) on or off as needed to suit your diagnostic requirements. When you enter the option for the first time the option will be enabled. Entering the same option again will toggle it off, disabling the option.

Syntax

diagnose debug ha {all | arp | basic | configuration | errors | file | health-check | heartbeat | layer4 | layer7 | message | state | sync-status | updated | upgrade}

diagnose debug ha list

all

Show the debug information for all enabled HA debug options.

arp

Show HA-related ARP behavior (especially for GARP).

Enabling this option logs events when HA changes the MAC addresses of system interfaces or when the current FortiADC sends out GARP packets.

This information is helpful for tracking changes when an HA node modifies its virtual MAC address settings, either due to a change in HA mode or adjustments to the virtual-mac setting, causing the interfaces’ MAC addresses to update and GARP packets to be sent.

basic

Show basic HA messages.

The basic debug option provides information on fundamental HA functions, including synchronization and failover processes.

This information is helpful for monitoring and tracking all basic HA activities and events.

configuration

Show HA configuration synchronization details.

It provides real-time information on incremental synchronization, including the exact configuration commands being sent from and received by the current FortiADC. For full synchronization, it displays details such as synchronization progress and any reasons for failure.

This information is useful for tracking both incremental and full configuration synchronization within the HA environment.

errors

Show HA error details.

Enabling this option provides real-time information on errors occurring during various HA activities.

This information is useful when HA functions are not performing as expected, such as in cases of synchronization issues or failures in file transfer.

file

Show HA backend file synchronization status.

This command provides information on the progress of file transfers within the HA environment, including both synchronization files and other files managed by HA.

This is useful for monitoring the status and progress of file transfers between HA nodes.

health-check

Show health-check synchronization status.

This debug command provides real-time information about the synchronization of health check data for link-load balancing and server-load balancing between HA nodes.

This is useful for verifying if the load-balancing health check information is being successfully synchronized across the HA cluster.

heartbeat

Show heartbeat messages between HA nodes.

This debug command provides details about the heartbeat messages sent and received by the current FortiADC.

This is useful for verifying whether heartbeat messages are being exchanged at the expected frequency between HA nodes and if they contain the correct information.

layer4

Show Layer 4 virtual server session and persistence table synchronization status.

This debug command provides details on the progress of synchronizing connection and session information when Layer 4 load balancing uses HA.

This is useful for verifying the synchronization of Layer 4 server load-balancing information across HA nodes.

layer7

Show Layer 7 virtual server session and persistence table synchronization status.

This debug command provides information about the synchronization status of Layer 7 persistence tables within an HA environment. It gives insight into the progress of synchronizing files related to Layer 7 load balancing functions, such as persistence data and Web Anti-Defacement files, across HA nodes.

This information is valuable for monitoring the synchronization process to ensure that configurations are correctly maintained between primary and secondary devices in an HA setup.

message

Show the debug information about the basic HA messages.

This debug command displays detailed debug information about the messages exchanged between HA nodes. It provides insights into the types of messages, data lengths, and other HA-specific data being transmitted.

This information is useful for diagnosing communication issues between HA nodes, helping to ensure proper synchronization and operation in an HA environment.

state

Show HA state change log.

This debug command provides logs detailing changes in the HA state of the current FortiADC. It includes information about transitions in HA interfaces and role changes, such as switching from Secondary to Primary, as well as updates received from peer devices.

This command is useful for monitoring the HA status of the FortiADC and verifying that it is correctly receiving state change information from its peers.

sync-status

Show HA synchronization status details.

This debug command provides logs detailing the synchronization status changes within an HA setup. It includes periodic updates on the HA health of the FortiADC and its peers, offering insights into the synchronization status and overall health of the HA configuration.

This information is useful for tracking the HA health and synchronization status of the FortiADC and its peers.

updated

Show HA message details from the "updated" module.

This debug command provides logs from the "updated" module, detailing the information and files transmitted and received during HA operations. This includes tracking events related to the "updated" module as they occur within the HA environment.

This is useful for monitoring and diagnosing HA events specifically associated with the "updated" module.

upgrade

Show HA image upgrade information.

This debug command provides detailed logs regarding the progress of image upgrades within an HA cluster. It records events such as when the ADC receives an image from a peer or when it pushes an image to peer devices.

This is useful for obtaining a granular view of the HA cluster's upgrade process, offering insights into the upgrade status and potential failure reasons beyond the information available in the system event log.

list

Lists the status of all HA debug options.

Example

(M) FAD1 # diagnose debug ha basic
ha debug basic enabled
(M) FAD1 # diagnose debug ha errors
ha debug errors enabled
(M) FAD1 # diagnose debug ha list
basic: enabled
configuration: disabled
errors: enabled
file: disabled
health-check: disabled
heartbeat: disabled
layer4: disabled
layer7: disabled
message: disabled
state: disabled
sync-status: disabled
upgrade: disabled
arp: disabled
(M) FAD1 # diagnose debug ha all
enabled all ha debugs
(M) FAD1 # [10-09 10:00:58] [kernel]Hello pkt: mode 2 group id 14 local_node_id 0 SN FADV040000146260 sended
[10-09 10:00:58] [kernel]Hello pkt: mode 2 group id 14 local_node_id 0 SN FADV040000146260 sended
[10-09 10:00:58] [kernel]Hello pkt: mode 2 group id 14 local_node_id 1 SN FADV040000146261 received
[10-09 10:00:58] [kernel]Hello pkt: mode 2 group id 14 local_node_id 1 SN FADV040000146261 received
(M) FAD1 # diagnose debug ha all
disabled all ha debugs

diagnose debug ha

diagnose debug ha

Use this command to display debug information related to High Availability (HA).

You can toggle the any HA debug option (except list) on or off as needed to suit your diagnostic requirements. When you enter the option for the first time the option will be enabled. Entering the same option again will toggle it off, disabling the option.

Syntax

diagnose debug ha {all | arp | basic | configuration | errors | file | health-check | heartbeat | layer4 | layer7 | message | state | sync-status | updated | upgrade}

diagnose debug ha list

all

Show the debug information for all enabled HA debug options.

arp

Show HA-related ARP behavior (especially for GARP).

Enabling this option logs events when HA changes the MAC addresses of system interfaces or when the current FortiADC sends out GARP packets.

This information is helpful for tracking changes when an HA node modifies its virtual MAC address settings, either due to a change in HA mode or adjustments to the virtual-mac setting, causing the interfaces’ MAC addresses to update and GARP packets to be sent.

basic

Show basic HA messages.

The basic debug option provides information on fundamental HA functions, including synchronization and failover processes.

This information is helpful for monitoring and tracking all basic HA activities and events.

configuration

Show HA configuration synchronization details.

It provides real-time information on incremental synchronization, including the exact configuration commands being sent from and received by the current FortiADC. For full synchronization, it displays details such as synchronization progress and any reasons for failure.

This information is useful for tracking both incremental and full configuration synchronization within the HA environment.

errors

Show HA error details.

Enabling this option provides real-time information on errors occurring during various HA activities.

This information is useful when HA functions are not performing as expected, such as in cases of synchronization issues or failures in file transfer.

file

Show HA backend file synchronization status.

This command provides information on the progress of file transfers within the HA environment, including both synchronization files and other files managed by HA.

This is useful for monitoring the status and progress of file transfers between HA nodes.

health-check

Show health-check synchronization status.

This debug command provides real-time information about the synchronization of health check data for link-load balancing and server-load balancing between HA nodes.

This is useful for verifying if the load-balancing health check information is being successfully synchronized across the HA cluster.

heartbeat

Show heartbeat messages between HA nodes.

This debug command provides details about the heartbeat messages sent and received by the current FortiADC.

This is useful for verifying whether heartbeat messages are being exchanged at the expected frequency between HA nodes and if they contain the correct information.

layer4

Show Layer 4 virtual server session and persistence table synchronization status.

This debug command provides details on the progress of synchronizing connection and session information when Layer 4 load balancing uses HA.

This is useful for verifying the synchronization of Layer 4 server load-balancing information across HA nodes.

layer7

Show Layer 7 virtual server session and persistence table synchronization status.

This debug command provides information about the synchronization status of Layer 7 persistence tables within an HA environment. It gives insight into the progress of synchronizing files related to Layer 7 load balancing functions, such as persistence data and Web Anti-Defacement files, across HA nodes.

This information is valuable for monitoring the synchronization process to ensure that configurations are correctly maintained between primary and secondary devices in an HA setup.

message

Show the debug information about the basic HA messages.

This debug command displays detailed debug information about the messages exchanged between HA nodes. It provides insights into the types of messages, data lengths, and other HA-specific data being transmitted.

This information is useful for diagnosing communication issues between HA nodes, helping to ensure proper synchronization and operation in an HA environment.

state

Show HA state change log.

This debug command provides logs detailing changes in the HA state of the current FortiADC. It includes information about transitions in HA interfaces and role changes, such as switching from Secondary to Primary, as well as updates received from peer devices.

This command is useful for monitoring the HA status of the FortiADC and verifying that it is correctly receiving state change information from its peers.

sync-status

Show HA synchronization status details.

This debug command provides logs detailing the synchronization status changes within an HA setup. It includes periodic updates on the HA health of the FortiADC and its peers, offering insights into the synchronization status and overall health of the HA configuration.

This information is useful for tracking the HA health and synchronization status of the FortiADC and its peers.

updated

Show HA message details from the "updated" module.

This debug command provides logs from the "updated" module, detailing the information and files transmitted and received during HA operations. This includes tracking events related to the "updated" module as they occur within the HA environment.

This is useful for monitoring and diagnosing HA events specifically associated with the "updated" module.

upgrade

Show HA image upgrade information.

This debug command provides detailed logs regarding the progress of image upgrades within an HA cluster. It records events such as when the ADC receives an image from a peer or when it pushes an image to peer devices.

This is useful for obtaining a granular view of the HA cluster's upgrade process, offering insights into the upgrade status and potential failure reasons beyond the information available in the system event log.

list

Lists the status of all HA debug options.

Example

(M) FAD1 # diagnose debug ha basic
ha debug basic enabled
(M) FAD1 # diagnose debug ha errors
ha debug errors enabled
(M) FAD1 # diagnose debug ha list
basic: enabled
configuration: disabled
errors: enabled
file: disabled
health-check: disabled
heartbeat: disabled
layer4: disabled
layer7: disabled
message: disabled
state: disabled
sync-status: disabled
upgrade: disabled
arp: disabled
(M) FAD1 # diagnose debug ha all
enabled all ha debugs
(M) FAD1 # [10-09 10:00:58] [kernel]Hello pkt: mode 2 group id 14 local_node_id 0 SN FADV040000146260 sended
[10-09 10:00:58] [kernel]Hello pkt: mode 2 group id 14 local_node_id 0 SN FADV040000146260 sended
[10-09 10:00:58] [kernel]Hello pkt: mode 2 group id 14 local_node_id 1 SN FADV040000146261 received
[10-09 10:00:58] [kernel]Hello pkt: mode 2 group id 14 local_node_id 1 SN FADV040000146261 received
(M) FAD1 # diagnose debug ha all
disabled all ha debugs