General FortiManager HA configuration steps
The following procedures assume that you are starting with four FortiManager units running the same firmware build and are set to the factory default configuration. The primary unit and the first backup unit are connected to the same network. The second backup units is connected to a remote network and communicates with the primary unit over the
Internet.
- Configure the FortiManager units for HA operation:
Configuring options
- Configure the primary unit.
- Configure the backup units.
- Change the network configuration so that the remote backup unit and the primary unit can communicate with each other.
- Connect the units to their networks.
- Add basic configuration settings to the cluster:
- Add a password for the admin administrative account. l Change the IP address and netmask of the port1 interface. l Add a default route.
Web-based Manager configuration steps
Use the following procedures to configure the FortiManager units for HA operation from the FortiManager unit Web-based Manager. Sample configuration settings are also shown.
To configure the primary unit for HA operation:
- Connect to the primary unit Web-based Manager.
- Go to System Settings > HA.
- Configure HA settings.
Example HA master configuration:
| Operation Mode | Master |
| Peer IP | 172.20.120.23 |
| Peer SN | <serial_number> |
| Peer IP | 192.268.34.23 |
| Peer SN | <serial_number> |
| Cluster ID | 15 |
| Group Password | password |
| Heartbeat Interval | 5 (Keep the default setting.) |
| Failover Threshold | 3 (Keep the default setting.) |
- Select Apply.
- Power off the primary unit.
To configure the backup unit on the same network for HA operation:
- Connect to the backup unit Web-based Manager.
- Go to System Settings > HA.
- Configure HA settings.
Example local backup configuration:
| Operation Mode | Slave |
| Priority | 5 (Keep the default setting.) |
| Peer IP | 172.20.120.45 |
| Peer SN | <serial_number> |
| Cluster ID | 15 |
| Group Password | password |
| Heartbeat Interval | 5 (Keep the default setting.) |
| Failover Threshold | 3 (Keep the default setting.) |
- Select Apply.
- Power off the backup unit.
Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!