Chapter 9 High Availability for FortiOS 5.0 : Operating a cluster : Operating a cluster
  
Operating a cluster
The configurations of all of the FortiGate units in a cluster are synchronized so that the cluster units can simulate a single FortiGate unit. Because of this synchronization, you manage the HA cluster instead of managing the individual cluster units. You manage the cluster by connecting to the web‑based manager using any cluster interface configured for HTTPS or HTTP administrative access. You can also manage the cluster by connecting to the CLI using any cluster interface configured for SSH or telnet administrative access.
The cluster web‑based manager dashboard displays the cluster name, the host name and serial number of each cluster member, and also shows the role of each unit in the cluster. The roles can be master (primary unit) and slave (subordinate units). The dashboard also displays a cluster unit front panel illustration.
Figure 202: Example cluster web‑based manager dashboard
You can also go to System > Config > HA to view the cluster members list. This includes status information for each cluster unit. You can also use the cluster members list for a number of cluster management functions including changing the HA configuration of an operating cluster, changing the host name and device priority of a subordinate unit, and disconnecting a cluster unit from a cluster. See “Cluster members list”.
You can use log messages to view information about the status of the cluster. See “Viewing and managing log messages for individual cluster units”. You can use SNMP to manage the cluster by configuring a cluster interface for SNMP administrative access. Using an SNMP manager you can get cluster configuration information and receive traps.
You can configure a reserved management interface to manage individual cluster units. You can use this interface to access the web‑based manager or CLI and to configure SNMP management for individual cluster units. See “Managing individual cluster units using a reserved management interface”.
You can manage individual cluster units by using SSH, telnet, or the CLI console on the web‑based manager dashboard to connect to the CLI of the cluster. From the CLI you can use the execute ha manage command to connect to the CLI of any unit in the cluster.
You can also manage individual cluster units by using a null-modem cable to connect to any cluster unit CLI. From there you can use the execute ha manage command to connect to the CLI of each unit in the cluster.