config system ha
Use this command to configure FortiNDR to act as a member of a Hgh Availability (HA) cluster in order to increase availability.
config system ha
config interface
edit <interface_name>
set action-on-primary {ignore-vip | use-vip}
set heartbeat-status {disable | primary | secondary}
set peer-ip <ipv4mask>
set port-monitor <enable | disable>
set virtual-ip <ipv4mask>
set hb-base-port <hb-port_int>
set hb-lost-threshold <hb-threshold_int>
set mode {off | primary | secondary}
set password <password_str>
|
Variable |
Description |
Default |
||
|---|---|---|---|---|
|
|
Enter the interface name of which you want to apply HA configuration. |
|
||
|
|
Enable/disable virtual IP configured on this interface.
|
|
||
|
|
Specify if this interface will be used for HA heartbeat and synchronization.
|
|
||
|
|
Enter the IP address of the matching heartbeat network interface of the other member of the HA group. If you are configuring the primary unit’s primary heartbeat network interface, enter the IP address of the secondary unit’s primary heartbeat network interface. For the secondary heartbeat network interface, enter the IP address of the other unit’s secondary heartbeat network interface. |
|
||
|
|
Enable to monitor a network interface for failure. If the port fails, the primary unit will trigger a failover. |
|
||
|
|
Enter the virtual IP address and netmask for this interface. |
|
||
|
|
Enter the first of four total TCP port numbers that will be used for:
|
|
||
|
|
Enter the total span of time, in seconds, for which the primary unit can be unresponsive before it triggers a failover and the secondary unit assumes the role of the primary unit.
|
|
||
|
|
Enter the HA operating mode or disable HA |
|
||
|
|
Enter a password for the HA group. The password must be the same on the primary and secondary FortiAI unit(s). The password must be a least 1 character. |
|
