FortiGate Active-Standby Cluster - Seperate Management IP addess

[pj255]

Hi,

We're running a pair of 1000C's in A-P (v5.0,build3608 (GA Patch 7)).

We currently manage both FW's using MGMT1 with one dedicated IP.

Does anyone how to give the primary and secondary separate dedicated MGMT IP's ?

I'd like to use MGMT 1 on Primary and MGMT 2 on secondary - each with a different IP address.

Thanks,

PJ

[kritt · Accepted solution]

Hello mark9885,

I 've had the same error.

In my case, this error has been resolved by deleting :

- static route associated to mgmt

- source-ip setting in the syslog server config

Maybe that the error could appear if the mgmt interface is part of  firewall policies, this error could appear to.

I guess that the interface has not to be part of a specific configuration before to be used as reserved management interface.

[mark9885]

That was it, there were statics set up on the mgmt to give me access. Console access is not optional unless you are fluent with this stuff and then advisable.

Many thanks...

[dsiecinski]

Sorry for Second Hijack :)

but I want to share revelation with You during my time with Fortigate

Network description:

We got 2 Fortigate 90E v5.6.3 build7719 (GA) with HA enabled working fine

We got ISP modem with 600Mbps download speed - Check with Laptop connected directly to modem

and standard network with 2 switches TP-Link connected to master and slave Fortigate 90E

about 20 clients on switches

network working fine but seems HA Fortigate decrease download speed to 100-150Mbps

Problem description:

I disconnect HA cable from slave router I got 600Mbps

I connect HA cable to slave router I got 100-150Mbps

speed tested on oakla

Is any one spoted problem like this

any clue will by precious

This problem persist too ... on Laptop connected directly to ISP modem (behind FortiGate routers)

greetings for AllFortiUsers