Fortinet FortiGate FortiGate-200A Administration Manual page 93

System config
FortiGate-200A Administration Guide
Inserting an HA cluster into your network temporarily interrupts communications on
the network because new physical connections are being made to route traffic through
the cluster. Also, starting the cluster interrupts network traffic until the individual
FortiGate units in the cluster are functioning and the cluster completes negotiation.
Cluster negotiation normally takes just a few seconds. During system startup and
negotiation all network traffic is dropped.
1 Connect the cluster units.
• Connect the internal interfaces of each FortiGate unit to a switch or hub connected
to your internal network.
• Connect the WAN1 interfaces of each FortiGate unit to a switch or hub connected
to your external network.
• Connect the DMZ2 interfaces of the FortiGate units to the same switch or hub. By
default the DMZ2 interfaces are used for HA heartbeat communication. These
interfaces should be connected together for the HA cluster to function.
• Optionally connect the WAN2 interfaces of each FortiGate unit to a switch or hub
connected a second external network.
• Optionally Connect the DMZ1 interfaces of the FortiGate units to another switch or
hub.
Figure 31: HA network configuration
Internal Network
Esc
A
Hub or
Switch
Esc
A
01-28006-0072-20041105
Internal WAN 1
CONSOLE USB INTERNAL DMZ1 DMZ2 WAN1 WAN2
1 2 3 4
Enter
DMZ 2
DMZ 2
CONSOLE USB INTERNAL DMZ1 DMZ2 WAN1 WAN2
1 2 3 4
Enter
Internal WAN 1
HA
Hub or
Switch
Router
Internet
93