Fortinet FortiGate 4000 Benutzerhandbuch
90
Fortinet Inc.
Managing an HA cluster
High availability
4
Select Virus & Intrusions.
The cluster displays virus and intrusions status for each cluster member. The primary
unit is identified as Local and the other units in the cluster are listed by serial number.
The display includes bar graphs of the number viruses and intrusions detected per
hour as well as line graphs of the number of viruses and intrusions detected for the
last 20 hours.
For more information, see
The cluster displays virus and intrusions status for each cluster member. The primary
unit is identified as Local and the other units in the cluster are listed by serial number.
The display includes bar graphs of the number viruses and intrusions detected per
hour as well as line graphs of the number of viruses and intrusions detected for the
last 20 hours.
For more information, see
5
Select Packets & Bytes.
The cluster displays the number of packets and bytes processed by each cluster
member.
The cluster displays the number of packets and bytes processed by each cluster
member.
To set the update frequency
1
Select the automatic refresh interval.
2
Select Go.
More frequent updates use more system resources and increase network traffic.
However, this only occurs when you are viewing the display using the web-based
manager.
More frequent updates use more system resources and increase network traffic.
However, this only occurs when you are viewing the display using the web-based
manager.
Viewing cluster sessions
To view the cluster communication sessions
1
Connect to the cluster and log into the web-based manager.
2
Go to System > Status > Session.
The session table displays the sessions processed by the primary unit in the cluster,
including HA communication sessions between the primary unit and the subordinate
units. HA communications use:
• Port 702 as the destination port,
• From and To IP address on the 10.0.0.0 subnet.
The session table displays the sessions processed by the primary unit in the cluster,
including HA communication sessions between the primary unit and the subordinate
units. HA communications use:
• Port 702 as the destination port,
• From and To IP address on the 10.0.0.0 subnet.
During cluster negotiation, the HA interface of each cluster unit is assigned an IP
address. The IP address of the primary unit is 10.0.0.1. The IP address of the first
subordinate unit is 10.0.0.2. The IP address of the second subordinate unit is
10.0.0.3 and so on.
address. The IP address of the primary unit is 10.0.0.1. The IP address of the first
subordinate unit is 10.0.0.2. The IP address of the second subordinate unit is
10.0.0.3 and so on.
Viewing and managing cluster log messages
To view log messages for each cluster member
1
Connect to the cluster and log into the web-based manager.
2
Go to Log&Report > Logging.
The cluster displays the primary unit Traffic log, Event log, Attack log, Antivirus log,
Web Filter log, and Email Filter log.
The pull-down list at the upper right of the display identifies the unit for which logs are
displayed. The primary unit is identified as Local and the other units in the cluster are
listed by serial number.
The cluster displays the primary unit Traffic log, Event log, Attack log, Antivirus log,
Web Filter log, and Email Filter log.
The pull-down list at the upper right of the display identifies the unit for which logs are
displayed. The primary unit is identified as Local and the other units in the cluster are
listed by serial number.