High Availability – FortiBalancer

5.5 Configuration Synchronization

The HA function provides configuration synchronization to simplify configurations on units and ensure the consistency of configurations on all units in an HA domain. HA supports two kinds of configuration synchronization: Bootup Synconfig and Runtime Synconfig. The two configuration synchronization functions can be both enabled.

5.5.1 Bootup Synconfig

Bootup Synconfig is to synchronize the configurations of the peer unit to the local unit after the local unit logs into the HA domain.

The local unit can log into the HA domain in two methods:

  • FFO Login: The unit logs into the HA domain through the FFO link.
  • Network Login: The unit logs into the HA domain through the network link. To use the FFO Login method, administrators need to perform the following operations on the local unit:
  1. Execute the “ha link ffo on” command to enable the FFO link.
  2. Execute the “ha synconfig bootup on” command to enable the Bootup Synconfig function of HA.

Note: After the FFO link and the Bootup Synconfig function are enabled, the local unit      will start to synchronize configurations about HA units and links from the peer unit.

  1. Execute the “ha link network on” command to enable the network links.
  2. Execute the “ha on” command to enable the HA function.

To use the Network Login method, administrators need to perform the following operations on the local unit:

  1. Execute the “ha unit” command to add the local unit and the peer unit.
  2. Execute the “ha synconfig bootup on” command to enable the Bootup Synconfig function of HA.
  3. Execute the “ha link network on” command to enable the network links.
  4. Execute the “ha on” command to enable the HA function.

Note: In Bootup Synconfig, only the configurations saved by executing the command              write memory” can be synchronized.

5.5.2 Runtime Synconfig

Runtime Synconfig is to synchronize the add/deletion/change of configurations on the local unit to other units in the same HA domain automatically while the HA is being running. This ensures that the configurations on all units in one HA domain are always the same.

Note: To synchronize the configuration changes from the local unit to the peer units,              please make sure that Runtime Synconfig is enabled on both the local unit and the peer units


Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.