Use this command to display information about an HA cluster. The command displays general HA configuration settings. The command also displays
information about how the cluster unit that you have logged into is operating in the cluster.
Usually you would log into the primary unit CLI using SSH or telnet. In this case the get system ha status command displays information about the primary unit first, and also displays the HA state of the primary unit (the primary unit operates in the work state). However, if you log into the primary unit and then use the execute ha manage command to log into a subordinate unit, (or if you use a console connection to log into a subordinate unit) the get system status command displays information about this subordinate unit first, and also displays the HA state of this subordinate unit. The state of a subordinate unit is work for an active-active cluster and standby for an active-passive cluster.
For a virtual cluster configuration, the get system ha status command displays information about how the cluster unit that you have logged into is operating in virtual cluster 1 and virtual cluster 2. For example, if you connect to the cluster unit that is the primary unit for virtual cluster 1 and the subordinate unit for virtual cluster 2, the output of the get system ha status command shows virtual cluster 1 in the work state and virtual cluster 2 in the standby state. The get system ha status command also displays additional information about virtual cluster 1 and virtual cluster 2.
Command syntax pattern
get system ha status
The command display includes the following fields. For more information see the examples that follow.
Fields Description
Model The FortiGate model number.
Mode The HA mode of the cluster: a-a or a-p.
Group The group ID of the cluster.
Debug The debug status of the cluster.
ses_pickup The status of session pickup: enable or disable.
load balance The status of the load-balance-all keyword: enable or disable. Relevant to active-active clusters only.
schedule The active load balancing schedule. Relevant to active-active clusters only.
Master Slave
Master displays the device priority, host name, serial number, and cluster index of the primary (or master) unit.
Slave displays the device priority, host name, serial number, and cluster index of the subordinate (or slave, or backup) unit or units.
The list of cluster units changes depending on how you log into the CLI. Usually you would use SSH or telnet to log into the primary unit CLI. In this case the primary unit would be at the top the list followed by the other cluster units.
If you use execute ha manage or a console connection to log into a subordinate unit CLI, and then enter get system ha status the subordinate unit that you have logged into appears
Configuration reference Examples
Examples
The following example shows get system ha status output for a cluster of two FortiGate-5001 units operating in active-active mode. The cluster group ID, session pickup, load balance all, and the load balancing schedule are all set to the default values. The device priority of the primary unit is also set to the default value. The device priority of the subordinate unit has been reduced to 100. The host name of the primary unit is 5001_Slot_4. The host name of the subordinate unit in is 5001_Slot_3.
number of vcluster The number of virtual clusters. If virtual domains are not enabled, the cluster has one virtual cluster. If virtual domains are enabled the cluster has two virtual clusters.
vcluster 1 The HA state (hello, work, or standby) and HA heartbeat IP address of the cluster unit that you have logged into in virtual cluster 1. If virtual domains are not enabled, vcluster 1 displays information for the cluster. If virtual domains are enabled, vcluster 1 displays information for virtual cluster 1.
The HA heartbeat IP address is 10.0.0.2 if you are logged into a the primary unit of virtual cluster 1 and 10.0.0.1 if you are logged into a subordinate unit of virtual cluster 1.
vcluster 1 also lists the primary unit (master) and subordinate units (slave) in virtual cluster 1. The list includes the cluster index and serial number of each cluster unit in virtual cluster 1. The cluster unit that you have logged into is at the top of the list.
If virtual domains are not enabled and you connect to the primary unit CLI, the HA state of the cluster unit in virtual cluster 1 is work. The display lists the cluster units starting with the primary unit.
If virtual domains are not enabled and you connect to a subordinate unit CLI, the HA state of the cluster unit in virtual cluster 1 is standby. The display lists the cluster units starting with the subordinate unit that you have logged into.
If virtual domains are enabled and you connect to the virtual cluster 1 primary unit CLI, the HA state of the cluster unit in virtual cluster 1 is work. The display lists the cluster units starting with the virtual cluster 1 primary unit.
If virtual domains are enabled and you connect to the virtual cluster 1 subordinate unit CLI, the HA state of the cluster unit in virtual cluster 1 is standby. The display lists the cluster units starting with the subordinate unit that you are logged into.
vcluster 2 vcluster 2 only appears if virtual domains are enabled.
vcluster 2 displays the HA state (hello, work, or standby) and HA heartbeat IP address of the cluster unit that you have logged into in virtual cluster 2. The HA heartbeat IP address is 10.0.0.2 if you are logged into the primary unit of virtual cluster 2 and 10.0.0.1 if you are logged into a subordinate unit of virtual cluster 2.
vcluster 2 also lists the primary unit (master) and subordinate units (slave) in virtual cluster 2. The list includes the cluster index and serial number of each cluster unit in virtual cluster 2. The cluster unit that you have logged into is at the top of the list.
If you connect to the virtual cluster 2 primary unit CLI, the HA state of the cluster unit in virtual cluster 2 is work. The display lists the cluster units starting with the virtual cluster 2 primary unit.
If you connect to the virtual cluster 2 subordinate unit CLI, the HA state of the cluster unit in virtual cluster 2 is standby. The display lists the cluster units starting with the subordinate unit that you are logged into.
Fields Description
Examples Configuration reference
The command output was produced by connecting to the primary unit CLI (host name 5001_Slot_4).
Master:128 5001_Slot_4 FG50012204400045 1 Slave :100 5001_Slot_3 FG50012205400050 0 number of vcluster: 1
vcluster 1: work 10.0.0.2 Master:0 FG50012204400045 Slave :1 FG50012205400050
The following command output was produced by using execute HA manage 0 to log into the subordinate unit CLI of the cluster shown in the previous example.
The host name of the subordinate unit is 5001_Slot_3.
Model: 5000
Slave :100 5001_Slot_3 FG50012205400050 0 Master:128 5001_Slot_4 FG50012204400045 1 number of vcluster: 1
vcluster 1: work 10.0.0.2 Slave :1 FG50012205400050 Master:0 FG50012204400045
The following example shows get system ha status output for a cluster of three FortiGate-5001 units operating in active-passive mode. The cluster group ID is set to 20 and session pickup is enabled. Load balance all and the load
balancing schedule are set to the default value. The device priority of the primary unit is set to 200. The device priorities of the subordinate units are set to 128 and 100. The host name of the primary unit is 5001_Slot_5. The host names of the subordinate units are 5001_Slot_3 and 5001_Slot_4.
Model: 5000
Master:200 5001_Slot_5 FG50012206400112 0 Slave :100 5001_Slot_3 FG50012205400050 1 Slave :128 5001_Slot_4 FG50012204400045 2 number of vcluster: 1
vcluster 1: work 10.0.0.1
Configuration reference Examples
Slave :2 FG50012205400050
The following example shows get system ha status output for a cluster of two FortiGate-5001 units with virtual clustering enabled. This command output was produced by logging into the primary unit for virtual cluster 1 (hostname:
5001_Slot_4, serial number FG50012204400045).
The virtual clustering output shows that the cluster unit with host name
5001_Slot_4 and serial number FG50012204400045 is operating as the primary unit for virtual cluster 1 and the subordinate unit for virtual cluster 2.
For virtual cluster 1 the cluster unit that you have logged into is operating in the work state and the serial number of the primary unit for virtual cluster 1 is FG50012204400045. For virtual cluster 2 the cluster unit that you have logged into is operating in the standby state and the serial number of the primary unit for virtual cluster 2 is FG50012205400050.
Model: 5000 Mode: a-p Group: 20 Debug: 0
ses_pickup: enable load_balance: disable schedule: round robin
Master:128 5001_Slot_4 FG50012204400045 1 Slave :100 5001_Slot_3 FG50012205400050 0 number of vcluster: 2
vcluster 1: work 10.0.0.2 Master:0 FG50012204400045 Slave :1 FG50012205400050 vcluster 2: standby 10.0.0.1 Slave :1 FG50012204400045 Master:0 FG50012205400050
The following example shows get system ha status output for the same cluster as shown in the previous example after using execute ha manage 0 to log into the primary unit for virtual cluster 2 (hostname: 5001_Slot_3, serial number FG50012205400050).
Model: 5000 Mode: a-p Group: 20 Debug: 0
ses_pickup: enable load_balance: disable schedule: round robin
Slave :100 5001_Slot_3 FG50012205400050 0 Master:128 5001_Slot_4 FG50012204400045 1 number of vcluster: 2
vcluster 1: standby 10.0.0.2 Slave :1 FG50012205400050 Master:0 FG50012204400045 vcluster 2: work 10.0.0.1 Master:0 FG50012205400050 Slave :1 FG50012204400045
Examples Configuration reference
The following example shows get system ha status output for a virtual cluster configuration where the cluster unit with hostname: 5001_Slot_4 and serial number FG50012204400045 is the primary unit for both virtual clusters. This command output is produced by logging into cluster unit with host name 5001_Slot_4 and serial number FG50012204400045.
Model: 5000 Mode: a-p Group: 20 Debug: 0
ses_pickup: enable load_balance: disable schedule: round robin
Master:128 5001_Slot_4 FG50012204400045 1 Slave :100 5001_Slot_3 FG50012205400050 0 number of vcluster: 2
vcluster 1: work 10.0.0.2 Master:0 FG50012204400045 Slave :1 FG50012205400050 vcluster 2: work 10.0.0.2 Master:0 FG50012204400045 Slave :1 FG50012205400050