Fortinet FortiGate FortiGate-1000A Administration Manual page 98

HA
98
If you have more than one FortiGate HA cluster on the same network, each cluster
must have a different password.
Schedule
If you are configuring an active-active cluster, select a load balancing schedule.
None No load balancing. Select None when the cluster interfaces are connected
to load balancing switches.
Hub Load balancing if the cluster interfaces are connected to a hub. Traffic is
distributed to cluster units based on the Source IP and Destination IP of
each packet processed by the cluster.
Least- Least connection load balancing. If the cluster units are connected using
switches, select Least Connection to distribute network traffic to the cluster
Connection
unit currently processing the fewest connections.
Round-Robin Round robin load balancing. If the cluster units are connected using
switches, select Round-Robin to distribute network traffic to the next
available cluster unit.
Weighted Weighted round robin load balancing. Similar to round robin, but weighted
values are assigned to each of the units in a cluster based on their capacity
Round-Robin
and on how many connections they are currently processing. For example,
the primary unit should have a lower weighted value because it handles
scheduling and forwards traffic. Weighted round robin distributes traffic
more evenly because units that are not processing traffic will be more likely
to receive new connections than units that are very busy. To configure
weighted round robin weights, see
weights" on page
Random Random load balancing. If the cluster units are connected using switches,
select Random to randomly distribute traffic to cluster units.
IP Load balancing according to IP address. If the cluster units are connected
using switches, select IP to distribute traffic to cluster units based on the
Source IP and Destination IP of the packet.
IP Port Load balancing according to IP address and port. If the cluster units are
connected using switches, select IP Port to distribute traffic to cluster units
based on the source IP, source port, destination IP, and destination port of
the packet.
By default a FortiGate HA active-active cluster load balances virus scanning sessions
among all cluster units. All other traffic is processed by the primary unit. Using the CLI,
you can configure the cluster to load balance all network traffic among all cluster units.
See "To configure load balancing TCP and virus scanning traffic" on page
Priorities of Heartbeat Device
Enable or disable HA heartbeat communication and set the heartbeat priority for each
interface in the cluster.
By default, HA heartbeat communication is set for two interfaces. You can disable the
HA heartbeat for either of these interfaces or enable HA heartbeat for other interfaces.
In most cases you can maintain the default heartbeat device configuration as long as
you can connect the heartbeat device interfaces together.
The heartbeat priority must be set for at least one cluster interface. If heartbeat
communication is interrupted the cluster stops processing traffic.
01-28011-0254-20051115
"To configure weighted-round-robin
103.
System Config
104.
Fortinet Inc.