NSE4 · Question #82
In HA, the option Reserve Management Port for Cluster Member is selected as shown in the exhibit below. Which statements are correct regarding this setting? (Choose two.)
The correct answer is A. Interface settings on port7 will not be synchronized with other cluster members. D. A gateway address may be configured for port7. When a management port is reserved in a FortiGate HA cluster, its configuration is not synchronized between members, allowing for a unique gateway to be set for that specific port.
Question
In HA, the option Reserve Management Port for Cluster Member is selected as shown in the exhibit below. Which statements are correct regarding this setting? (Choose two.)
Exhibit
Options
- AInterface settings on port7 will not be synchronized with other cluster members.
- BThe IP address assigned to this interface must not overlap with the IP address subnet assigned to
- CWhen connecting to port7 you always connect to the master device.
- DA gateway address may be configured for port7.
How the community answered
(26 responses)- A92% (24)
- B4% (1)
- C4% (1)
Why each option
When a management port is reserved in a FortiGate HA cluster, its configuration is not synchronized between members, allowing for a unique gateway to be set for that specific port.
When "Reserve Management Port for Cluster Member" is enabled, the interface's settings (like IP address, administrative access) are specific to each FortiGate unit in the HA cluster and are not synchronized, ensuring individual management access even if the cluster fails over.
The IP address on a reserved management port must be unique among cluster members, but it can reside within any non-overlapping subnet; the statement implies a restriction related to *other* interfaces, which isn't the primary concern.
Reserving a management port allows direct connection to *that specific unit*, regardless of its HA role (master or slave), for individual management, rather than always connecting to the master.
Since a reserved management port's configuration is not synchronized and is intended for out-of-band management, it can be assigned its own IP address and a corresponding gateway address if it needs to reach management subnets outside its local segment.
Concept tested: FortiGate HA reserved management port
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/523956/reserved-management-interface
Topics
Community Discussion
No community discussion yet for this question.
