system ha {cpeer interface peer secondary-interface secondary-peer}

set

system ha {cpeer interface peer secondary-interface secondary-peer}

Use these commands to configure primary heartbeat interface settings for FortiMail active-passive and config only HA groups. You can also use these commands to optionally configure the secondary heartbeat interface settings for FortiMail active-passive HA.

For an active-passive or a config only HA group, use the set system ha interface command to select the network interface to be used for the primary heartbeat and to configure the primary heartbeat local IP address and netmask.

For a config only HA group use the set system ha cpeer command to add the IP address of a backup unit (also called a peer) to the known peers list or to change the IP address of a backup unit already added to the known peers list. The primary unit requires these IP addresses to be able to communicate with the backup units.

For an active-passive HA group use the set system ha peer command to configure the primary heartbeat peer IP address.

For an active-passive HA group use the set system ha secondary-interfacecommand to configure the network interface to be used for the secondary heartbeat and to configure the secondary heartbeat local IP address and netmask. You can specify an interface name, disable the secondary heartbeat, or set the secondary heartbeat to any if you don’t want to use a specific interface as the backup heartbeat interface. any means that any interface with its HA interface configuration set to ignore this interface using the set system ha takeover <interface_str> ignore command can be used as the secondary heartbeat interface.

For an active-passive HA group use the set system ha secondary peer command to configure the secondary heartbeat peer IP address.

Syntax

set system ha cpeer <cpeer_integer> <cpeer_ipv4>

set system ha interface <primary-interface_str> <primary-local_ipv4> <netmask_ipv4>

set system ha peer <primary-peer_ipv4>

set system ha secondary-interface {<secondary-interface_str> any disabled} <secondary-local_ipv4> <netmask_ipv4>

set system ha secondary-peer <secondary-peer_ipv4>

Keywords/Variables

Description

Default

 

 

 

any

Set the secondary heartbeat interface to use any

 

 

interface that has been set to ignore using the set

 

 

system ha takeover command.

 

disabled

Disable the secondary heartbeat interface.

 

<cpeer_integer>

The number of the backup unit in the known peers list.

 

 

You can add up to 24 backup units or peers.

 

<cpeer_ipv4>

The IP address of the config only peer unit. In a config

 

 

only HA group you would normally set 10.0.0.2 as the

 

 

peer IP address for the first backup unit, 10.0.0.3 as

 

 

the peer IP address for the second backup unit,

 

 

10.0.0.4 as the peer IP address for the third backup

 

 

unit, and so on.

 

FortiMail™ Secure Messaging Platform Version 3.0 MR4 CLI Reference

314

06-30004-0420-20080814

Page 314
Image 314
Fortinet 3.0 MR4 manual Any, System ha takeover command Disabled, Cpeerinteger, Cpeeripv4