AC: FortiGate 7.4 Administrator Study Guide pg.421
"After the initial synchronization is complete, whenever a change is made to the configuration of an HA cluster device (primary or secondary), incremental synchronization sends the same configuration change to all other cluster devices over the HA heartbeat link"
After the initial synchronization is complete, whenever a change is made to the configuration of an HA cluster device (primary or secondary), incremental synchronization sends the same configuration change to all other cluster devices over the HA heartbeat link. An HA synchronization process running on each cluster device receives the configuration change and applies it to the cluster device. For example, if you create a firewall address object, the primary doesn’t resend its complete configuration—it sends only the new object.
I believe that this is a tricky question. The correct answer could be A, B, and C since incremental configuration sync can happen if any of the member configurations are changed.
O FortiGate usa checksums para verificar a consistência das configurações entre os membros do cluster. Se os checksums forem diferentes, isso indica que as configurações estão fora de sincronia.
Apenas o dispositivo primário pode fazer alterações na configuração. Essas alterações são então sincronizadas de forma incremental com os dispositivos secundários no cluster.
Incremental config sync only happens by changes on primary HA member other device's can't have any config changes when they are secondary. So the correct answer is A & B.
why D is not correct, but A is correct? as in HA mode, each unit could have difference "dedicated management interface" setting (e.g. management interface IP) ... how come the checksum must match?
We know that some configurations are not synchronizable, but this does not mean that synchronization will not occur, it will occur at the level of the configurations that are synchronizable. (page 423 Fortigate 7.4 administrator guide)
Checksum must be equal on both fortigate.
Incremental Configuration Synchronization happens when the primary configuration is changed and changes are synchronized to the secondary. Secondary configuration is changed and changes are synchronized to the primary.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
bob511
Highly Voted 5 months, 4 weeks agoTheVaro
Most Recent 1 week, 3 days agoMZED68
1 month, 1 week agoMZED68
1 month, 1 week agoMZED68
1 month, 1 week agohugovasconcelos
1 month, 3 weeks agoDineshkaarthik
2 months agoSingSingHK
2 months, 3 weeks agoSingSingHK
2 months, 1 week agojl2307
2 months, 2 weeks agosxcap
2 months, 3 weeks agovuhidus
3 months, 1 week agos4mu3l007
3 months, 4 weeks agomiguelmagr
5 months agomhl2203
5 months agoyoula5
5 months agoBeatledrew
5 months, 1 week agoandres8h
6 months ago