Refer to the exhibit showing FortiGate configurations.

*************************
* FMG-A CONFIG *
*************************
config system ha
set failover-mode vrrp
set mode primary
config monitored-ips
edit 1
set interface "port2"
set ip "192.168.48.63"
next
end
config peer
edit 1
set ip 10.3.106.64
set serial-number "FMG-VM0A17001234"
next
end
set priority 50
set vip "10.3.106.65"
set vrrp-interface "port1"
end

*************************
* FMG-B CONFIG *
*************************
config system central-management
set type fortimanager
set serial-number "FMG-VM0A17001234"
set fmg "10.3.106.63"
end

FortiManager VM high availability (HA) is not functioning as expected after being added to an existing deployment. The administrator finds that VRRP HA mode is selected, but primary and secondary roles are greyed out in the GUI. The managed devices never show online when FMG-B becomes primary, but they will show online whenever the FMG-A becomes primary. What change will correct HA functionality in this scenario?

Question

Refer to the exhibit showing FortiGate configurations.

*************************
* FMG-A CONFIG *
*************************
config system ha
 set failover-mode vrrp
 set mode primary
 config monitored-ips
 edit 1
 set interface "port2"
 set ip "192.168.48.63"
 next
 end
 config peer
 edit 1
 set ip 10.3.106.64
 set serial-number "FMG-VM0A17001234"
 next
 end
 set priority 50
 set vip "10.3.106.65"
 set vrrp-interface "port1"
end

*************************
* FMG-B CONFIG *
*************************
config system central-management
 set type fortimanager
 set serial-number "FMG-VM0A17001234"
 set fmg "10.3.106.63"
end

FortiManager VM high availability (HA) is not functioning as expected after being added to an existing deployment. The administrator finds that VRRP HA mode is selected, but primary and secondary roles are greyed out in the GUI. The managed devices never show online when FMG-B becomes primary, but they will show online whenever the FMG-A becomes primary. What change will correct HA functionality in this scenario?

Accepted Answer

A. Change the FortiManager IP address on the managed FortiGate to 10.3.106.65.

Answer

B. Move the monitored IP to match on both FortiManager devices.

Answer

C. Unset the primary and secondary roles in the FortiManager CLI configuration so VRRP will decide who is primary.

Answer

D. Change the priority of FMG-A to be numerically lower for higher preference.

Refer to the exhibit showing FortiGate configurations. **** FMG-A CONFIG * config system ha set failover-mode vrrp set mode primary config monitored-ips edit…

Question

Options

How the community answered

Community Discussion