Fortinet FortiGate 4000 - Manual (Page 92)

92
Fortinet Inc.
Managing an HA cluster High availability
Managing individual cluster units
You can connect to the CLI of each unit in the cluster. This procedure describes how
to log into the primary unit CLI and from there connect to the CLI of subordinate
cluster units. You log into the subordinate unit with the ha_admin administrator
account. This built-in administrator account gives you read & write permission on the
subordinate unit. For information about administration accounts and permissions, see
“Adding and editing administrator accounts” on page 178 .
To manage a cluster unit
1 Use SSH to connect to the cluster and log into the CLI.
Connect to any cluster interface configured for SSH management to log into the
cluster.
You can also use a direct cable connection to log into the primary unit CLI. (To do this
you must know which unit is the primary unit. See
“Selecting a FortiGate unit as a
permanent primary unit” on page 95 to control which FortiGate unit becomes the
primary unit).
2 Enter the following command followed by a space and type a question mark (?):
execute ha manage
The CLI displays a list of all the subordinate units in the cluster. Each cluster unit is
numbered, starting at 1. The information displayed for each cluster unit includes the
unit serial number and host name of the unit.
3 Complete the command with the number of the subordinate unit to log into. For
example, to log into subordinate unit 1, enter the following command:
execute ha manage 1
Press Enter and you are connected to and logged into the CLI of the selected
subordinate unit. If this subordinate unit has a different host name, the CLI prompt
changes to this host name. You can use CLI commands to manage this subordinate
unit.
4 Enter the following command to return to the primary unit CLI:
exit
You can use the execute ha manage command to log into the CLI of any of the
other subordinate units in the cluster.
Changing cluster unit host names
You can identify individual cluster units by giving each unit a unique host name. The
host name is the only configuration setting not synchronized by the cluster.
To set the host name of each cluster member
1 Use SSH to connect to the cluster and log into the CLI.
2 Enter the following command to change the host name of the primary unit:
set system hostname
3 Use the information in “Managing individual cluster units” on page 92 to log into each
cluster member.
4 Enter the following command to change the host name of the cluster member.
set system hostname
5 Repeat steps 3 and 4 for each cluster member.