search

fortinetsolutions / Azure-Templates

Azure Templates for Fortinet Solutions
https://www.fortinet.com/azure
62 stars 63 forks source link

how to specific an interface dedicated to FGSP and configuration syncronization? #20

Open justinstanley opened 4 years ago

justinstanley commented 4 years ago

Hi,

We've followed your guide on the HA using azure LB's, but have added another interface and we''re trying to use that solely for state synchronization. The problem is it's not using the IP specified in the peerip. We've tested this several times and it seems like the image is always using PORT2(which in our case is our "public/untrusted" network.

config system ha set session-pickup enable set session-pickup-connectionless enable set session-pickup-nat enable set session-pickup-expectation enable set override disable end

config system cluster-sync edit 0 set peerip 10.0.1.x set syncvd "root" next end

JustinGrote commented 3 years ago

I had same issue. The istructions in the readme for the non-LB one show the config is

set unicast-hb enable set unicast-hb-peerip 10.0.3.4

But these commands do not exist in 6.4.2 at least, can we get updated guidance for latest fortigate versions?

EDIT: These commands appear only in active/passive mode.