System config
Configuring an HA cluster
FortiGate-200A Administration Guide
If a low priority interface fails on one cluster unit and a high priority interface fails on
another cluster unit, a unit in the cluster with a working connection to the high priority
interface would, if it becomes necessary to negotiate a new primary unit, be selected
instead of a unit with a working connection to the low priority interface.
•
Configuring an HA cluster
•
Managing an HA cluster
Use the following procedures to create an HA cluster consisting of two or more
FortiGate units. These procedures describe how to configure each of the FortiGate
units for HA operation and then how to connect the FortiGate units to form a cluster.
Once the cluster is connected you can configure it in the same way as you would
configure a standalone FortiGate unit.
•
To configure a FortiGate unit for HA operation
•
To connect a FortiGate HA cluster
•
To add a new unit to a functioning cluster
•
To configure weighted-round-robin weights
To configure a FortiGate unit for HA operation
Each FortiGate unit in the cluster must have the same HA configuration. Use the
following procedure to configure each FortiGate unit for HA operation.
Note: The following procedure does not include steps for configuring interface heartbeat
devices and interface monitoring. Both of these HA settings should be configured after the
cluster is up and running.
Note: The following procedure does not include steps for configuring interface heartbeat
devices and interface monitoring. Interface monitoring should be configured after the cluster is
up and running.
1
Power on the FortiGate unit to be configured.
2
Connect to the web-based manager.
3
Give the FortiGate unit a unique host name.
See
"To change FortiGate host name" on page
individual cluster units.
4
Go to System > Config > HA.
5
Select HA.
6
Select the HA mode.
7
Select a Group ID for the cluster.
The Group ID must be the same for all FortiGate units in the HA cluster.
8
Optionally change the Unit Priority.
See
"Unit Priority" on page
9
If required, select Override master.
See
"Override Master" on page
87.
87.
01-28006-0072-20041105
29. Use host names to identify
HA
91