FortiMail
FortiMail provides advanced, multi-layer protection against the full spectrum of email-borne threats
Not applicable
Article Id 197374
Article
Errata

The descriptions of Local IP Address and Peer IP Address in the FortiMail Administration Guide and FortiMail online help are misleading. These descriptions appear in the "Configuring and Operating FortiMail HA" section and in the "FortiMail CLI Reference" section.

Also some example Local IP Addresses and Peer IP Addresses contain incorrect IP addresses. In all cases 10.10.10.1 should be changed to 10.0.0.1 and 10.10.10.2 should be changed to 10.0.0.2.

Documentation Affected
  • FortiMail 2.8 MR1 Administration Guide (document number 06-28001-0154-20070321)
  • FortiMail 2.8 Administration Guide (document Number 06-28000-0154-20060927)
  • FortiMail 2.2 Administration Guide (document Number 06-22000-0154-20060201)
Corrected Text

The correct Web-based manager option descriptions are as follows.

Local IP Address

The HA heartbeat IP address for this FortiMail unit. When the FortiMail unit is operating in HA mode, the local IP address appears on the System > Network > Interface list for the HA heartbeat interface.

The local IP address of the primary unit must match the peer IP address of the backup unit. Normally, you would set the local IP address of the primary unit to 10.0.0.1.

The local IP address of the backup unit must match the peer IP address of the primary unit. In an active-passive HA group you would normally set the local IP address on the backup unit to 10.0.0.2.

In a config only HA group you would normally set 10.0.0.2 as the local IP address of the first backup unit, 10.0.0.3 as the local IP address of the second backup unit, 10.0.0.4 as the local IP address of the third backup unit, and so on.

Peer IP Address (active-passive HA)

The HA heartbeat IP address for the other FortiMail unit in the HA group. This is the IP address that the FortiMail unit expects to be able to connect to find the other FortiMail unit in the HA group.

The peer IP address of the primary unit must match the local IP address of the backup unit. Normally you would set the peer IP address of the primary unit to 10.0.0.2.

The peer IP address of the backup unit must match the local IP address of the primary unit. Normally you would set the peer IP address of the backup unit to 10.0.0.1.

Corrected FortiMail CLI command descriptions.

set system ha interface <name> <ipv4> <netmask>

Configures the HA heartbeat interface.

<name> the name of the network interface to be used for the HA heartbeat. The default HA heartbeat interface is the network interface with the highest number. In most cases you would not have to select a different network interface.

<ipv4> <netmask> the local HA heartbeat IP address and netmask for this FortiMail unit. When the FortiMail unit is operating in HA mode, you can enter get system interface <name> to display this IP address and netmask, where <name> is the name of the FortiMail network interface used for the HA heartbeat. The local IP address and netmask of the primary unit must match the peer IP address and netmask of the backup unit. Normally you would set the primary unit local IP address and netmask to 10.0.0.1 255.255.255.0. Normally you would set the backup unit local IP address and netmask to 10.0.0.2 255.255.255.0.

set system ha peer <peer>

Configures the peer HA heartbeat interface IP address.

<peer> the peer HA heartbeat IP address for this FortiMail unit. The peer HA heartbeat IP address is the HA heartbeat IP address for the other FortiMail unit in the HA group. This is the IP address that the FortiMail unit expects to be able to connect to find the other FortiMail unit in the HA group. The peer IP address of the primary unit must match the local IP address of the backup unit. Normally you would set the primary unit peer IP address is 10.0.0.2. Normally you would set the backup unit peer IP address to 10.0.0.1.

Release(d) DateAll of these changes will appear in the FortiMail v3.0 Administration Guide and online help.