config : system conf-sync
 
system conf-sync
Use this command to configure non-HA configuration synchronization settings.
 
This command configures, but does not execute, the synchronization. To do this, use the web UI.
This command works only when administrative domains (ADOMs) are disabled.
This type of synchronization is used between FortiWeb appliances that are not part of a native FortiWeb high availability (HA) pair, such as when you need to clone the configuration once, or when HA is provided by an external device.
To use this command, your administrator account’s access control profile must have either w or rw permission to the sysgrp area. For more information, see “Permissions”.
Syntax
config system conf-sync
set ip <remote-fortiweb_ipv4>
set password <password_str>
set sync-type {full‑sync | partial-sync}
set server-port <port_int>
end
Variable
Description
Default
ip <remote-fortiweb_ipv4>
Type the IP address of the remote FortiWeb appliance that you want to synchronize with the local FortiWeb appliance.
0.0.0.0
password <password_str>
Type the administrator password for the remote FortiWeb appliance. The maximum length is 63 characters.
No default.
sync-type {full‑sync | partial-sync}
Select one of the synchronization types:
• full-sync — Update the entire configuration of the peer FortiWeb appliance except its network interfaces and administration configuration.
Note: This option has no effect if the FortiWeb appliance is operating in reverse proxy mode. See “config system settings”.
• partial-sync — Update the configuration of the peer FortiWeb appliance, with the exception of:
config system ...
config router ...
config server-policy ... commands for health, server-pool, vserver, service, and http-content-routing-policy
config server-policy policy (completely replaces the peer’s policy)
partial-sync
server-port <port_int>
Type the port number of the remote (peer) FortiWeb appliance that is used to connect to the local appliance for configuration synchronization. The valid range is from 1 to 65,535.
Caution: The port number used with this command must be different than the port number used with config system global command or the submitting operation will fail.
8333
Related topics
• config system settings
• config system global