mini鵝的天地

設定

FortiGate_Primary

FortiGate_Primary  # config system ha
FortiGate_Primary (ha) # set group-name "FGname"
FortiGate_Primary (ha) # set password HApass  //同步密碼需相同
FortiGate_Primary (ha) # set mode a-p  //ha模式 active-passive
FortiGate_Primary (ha) # set priority 250 //優先級越大越優先
FortiGate_Primary (ha) # set hbdev "port15" 50 "port16" 50 //心跳介面
FortiGate_Primary (ha) # set monitor "port9" "port10"  //監控介面，若有問題會切換
FortiGate_Primary (ha) # set override disable  //搶佔功能關閉
FortiGate_Primary  #end

FortiGate_Backup

FortiGate_Backup  # config system ha
FortiGate_Backup (ha) # set group-name "FGname"
FortiGate_Backup (ha) # set password HApass  //同步密碼需相同
FortiGate_Backup (ha) # set mode a-p  //ha模式 active-passive
FortiGate_Backup (ha) # set priority 100 //優先級越大越優先
FortiGate_Backup (ha) # set hbdev "port15" 50 "port16" 50 //心跳介面
FortiGate_Backup (ha) # set monitor "port9" "port10"  //監控介面，若有問題會切換
FortiGate_Backup (ha) # set override disable  //搶佔功能關閉
FortiGate_Backup  # end

手動同步
execute ha synchronize start

檢查
diagnose sys ha checksum cluster 
show system ha
get sys ha status

其他相關指令
Syntax

config system ha
 set arps <integer>
 set arps-interval <integer>
 set datadev <datasource>
 set group-id <integer>
 set group-name <string>
 set hb-interval <integer>
 set hb-lost-threshold <integer>
 set hbdev <datasource>
 set http-persistence-pickup {enable|disable}
 set local-node-id <integer>
 set l4-persistence-pickup {enable|disable}
 set l4-session-pickup {enable|disable}
 set mode {active-active | active-passive | standalone}
 set monitor <datasource>
 set node-list {0 1 2 3 4 5 6 7}
 set override {enable|disable}
 set priority <integer> 
 set remote-ip-monitor {enable|disable}
 set remote-ip-failover-hold-time <integer>
 set remote-ip-failover-threshold <integer>
   config remote-ip-monitor-list
    edit <name>
      set health-check-interval <integer>
      set health-check-retry <integer>
      set health-check-timeout <integer>
      set interface <datasource>
      set remote-address <class_ip>
    next
   end
end

參考網站
http://help.fortinet.com/fadc/4-4-0/cli/Content/FortiADC/cli-ref/config_system_ha.htm