Configuration synchronization
Wen you log into the FortiGate-7000 GUI or CLI by connecting to the IP address of the aggregate management interface, or through a console connection, you are logging into the FIM in slot 1 (the address of slot 1 is FIM01). The FIM in slot 1 is the FortiGate-7000 config-sync master. All configuration changes must be made from the GUI or CLI of the FIM in slot 1. The he FIM in slot 1 synchronizes configuration changes to the other modules and makes sure module configurations remain synchronized with the FIM in slot 1.
If the FIM in slot 1 fails or reboots, the FIM in slot 2 becomes the config-sync master.
Once you have logged into the GUI or CLI of the FIM in slot 1 and verified that the system is operating normally, you can view and change the configuration of your FortiGate-7000 just like any FortiGate. For example, you can configure firewall policies between any two interfaces. You can also configure aggregates of the front panel interfaces.