The user can configure a cluster level failover IP for each port except port3 and ports the sniffer is sniffing. This IP set works as an alias IP of the Master node network port. The Master node Local IP set and Primary Slave node Local IP set are kept locally during fail-over.
This fail-over IP set should be set on the current Master node through the CLI command
hc-settings. It should be in the same subnet of each port’s local IP. Client devices such as FortiGate should point to this failover IP. When a fail-over occurs, this fail-over IP set will be applied on the new Master node.