Web-based Manager configuration steps
Use the following procedures to configure the FortiManager units for HA operation from the FortiManager unit Web‑based Manager.
To configure the primary unit for HA operation:
1. Connect to the primary unit Web‑based Manager.
2. Go to System Settings > General > HA.
3. Configure HA settings.
4. Select Apply.
Operation Mode | Master |
Peer IP | 172.20.120.23 |
Peer SN | <serial_number> |
Peer IP | 192.268.34.23 |
Peer SN | <serial_number> |
Cluster ID | 15 |
Group Password | password |
Heartbeat Interval | 5 (Keep the default setting.) |
Failover Threshold | 3 (Keep the default setting.) |
5. Power off the primary unit.
To configure the backup unit on the same network for HA operation:
1. Connect to the backup unit Web‑based Manager.
2. Go to System Settings > General > HA.
3. Configure HA settings.
4. Select Apply.
Operation Mode | Slave |
Priority | 5 (Keep the default setting.) |
Peer IP | 172.20.120.45 |
Peer SN | <serial_number> |
Cluster ID | 15 |
Group Password | password |
Heartbeat Interval | 5 (Keep the default setting.) |
Failover Threshold | 3 (Keep the default setting.) |
5. Power off the backup unit.
To configure a remote backup unit for HA operation:
1. Connect to the backup unit Web‑based Manager.
2. Go to System Settings > General > HA.
3. Configure HA settings.
4. Select Apply.
Operation Mode | Slave |
Priority | 5 (Keep the default setting.) |
Peer IP | 192.168.20.23 |
Peer SN | <serial_number> |
Cluster ID | 15 |
Group Password | password |
Heartbeat Interval | 5 (Keep the default setting.) |
Failover Threshold | 3 (Keep the default setting.) |
5. Power off the backup unit.
To change the network configuration so that the remote backup unit and the primary unit can communicate with each other:
Configure the appropriate firewalls or routers to allow HA heartbeat and synchronization traffic to pass between the primary unit and the remote backup unit using the peer IPs added to the primary unit and remote backup unit configurations.
HA traffic uses TCP port 5199.
To connect the cluster to the networks:
1. Connect the cluster units.
No special network configuration is required for the cluster.
2. Power on the cluster units.
The units start and user HA heartbeat packets to find each other, establish the cluster, and synchronize their configurations.
To add basic configuration settings to the cluster:
Configure the cluster to connect to your network as required.