Fortinet FortiGate FortiGate-1000A Administration Manual page 102

HA
13
14
15
16
17
18
102
If you are configuring a NAT/Route mode cluster, power off the FortiGate unit and then
repeat this procedure for all the FortiGate units in the cluster. Once all of the units are
configured, continue with
If you are configuring a Transparent mode cluster, reconnect to the web-based
manager.
You may have to wait a few minutes before you can reconnect.
Go to System > Status.
Select Change to Transparent Mode and select OK to switch the FortiGate unit to
Transparent mode.
Power off the FortiGate unit.
Repeat this procedure for all of the FortiGate units in the cluster then continue with
connect a FortiGate HA cluster" on page
To connect a FortiGate HA cluster
Use the following procedure to connect a cluster operating in NAT/Route mode or
Transparent mode. Connect the cluster units to each other and to your network. You
must connect all matching interfaces in the cluster to the same hub or switch. Then
you must connect these interfaces to their networks using the same hub or switch.
Fortinet recommends using switches for all cluster connections for the best
performance.
Inserting an HA cluster into your network temporarily interrupts communications on
the network because new physical connections are being made to route traffic through
the cluster. Also, starting the cluster interrupts network traffic until the individual cluster
units are functioning and the cluster completes negotiation. Cluster negotiation
normally takes just a few seconds. During system startup and negotiation all network
traffic is dropped.
1 Connect the cluster units.
• Connect port 1 of each cluster unit to a switch or hub connected to your internal
network.
• Connect port 2 of each cluster unit to a switch or hub connected to your external
network.
• Optionally connect ports 5, 6, 7, 8, 9 and 10 of each cluster unit to switches or hubs
connected to other networks.
• Connect port 4 of each cluster unit to another switch or hub. By default port 4 is
used for HA heartbeat communication. These interfaces must be connected
together for the HA cluster to function.
• Optionally connect port 3 of each cluster unit to another switch or hub. By default
port 3 is the backup interface for HA heartbeat communication.
"To connect a FortiGate HA cluster" on page
01-28011-0254-20051115
102.
System Config
102.
"To
Fortinet Inc.