An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the…

Question

Options

• AConfigure set link-failed-signal enable under config system ha on both cluster members
• BConfigure set send-garp-on-failover enable under config system ha on both cluster members.
• CConfigure remote link monitoring to detect an issue in the forwarding path.
• DVerify that the speed and duplex settings match between the FortiGate interfaces and the

• A
  76% (38)
• B
  2% (1)
• C
  14% (7)
• D
  8% (4)

Explanation

Virtual MAC Address and Failover - The new primary broadcasts Gratuitous ARP packets to notify the network that each virtual MAC is now reachable through a different switch port. - Some high-end switches might not clear their MAC table correctly after a failover - Solution: Force former primary to shut down all its interfaces for one second when the failover happens (excluding heartbeat and reserved management interfaces): #Config system ha set link-failed-signal enable - This simulates a link failure that clears the related entries from MAC table of the switches. https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-FortiGate-HA-link-failed-signal-

No community discussion yet for this question.