Table of Contents
Advertisement
High availability
10
FortiGate-4000 Installation and Configuration Guide
6
Select the HA mode.
Select Active-Active mode to create an Active-Active HA cluster.
Select Active-Passive mode to create an Active-Passive HA cluster.
The HA mode must be the same for all FortiGate units in the HA cluster.
7
Enter and confirm a password for the HA cluster.
The password must be the same for all FortiGate units in the HA cluster.
8
Select a Group ID for the HA cluster.
The Group ID must be the same for all FortiGate units in the HA cluster.
9
If you are configuring Active-Active HA, select a schedule.
The schedule controls load balancing among the FortiGate units in the active-active
HA cluster. The schedule must be the same for all FortiGate units in the HA cluster.
None
Hub
Least Connection
Round Robin
Weighted Round
Robin
Random
IP
IP Port
Note: Do not configure Monitor on Interface until the FortiGate cluster is connected and
functioning. See
"Configuring cluster interface monitoring" on page
Select Apply.
The FortiGate unit negotiates to establish an HA cluster. When you select apply you
might temporarily loose connectivity with the FortiGate unit as the HA cluster
negotiates.
No load balancing. Select None when the cluster interfaces are
connected to load balancing switches.
Load balancing for hubs. Select Hub if the cluster interfaces are
connected to a hub. Traffic is distributed to units in a cluster based on
the Source IP and Destination IP of the packet.
Least connection load balancing. If the FortiGate units are connected
using switches, select Least connection to distribute traffic to the cluster
unit with the fewest concurrent connections.
Round robin load balancing. If the FortiGate units are connected using
switches, select round robin to distribute traffic to the next available
cluster unit.
Weighted round robin load balancing. Similar to round robin, but
weighted values are assigned to each of the units in a cluster based on
their capacity and on how many connections they are currently
processing. For example, the primary unit should have a lower weighted
value because it handles scheduling and forwards traffic. Weighted
round robin distributes traffic more evenly because units that are not
processing traffic will be more likely to receive new connections than
units that are very busy.
Random load balancing. If the FortiGate units are connected using
switches, select random to randomly distribute traffic to cluster units.
Load balancing according to IP address. If the FortiGate units are
connected using switches, select IP to distribute traffic to units in a
cluster based on the Source IP and Destination IP of the packet.
Load balancing according to IP address and port. If the FortiGate units
are connected using switches, select IP Port to distribute traffic to units
in a cluster based on the Source IP, Source Port, Destination IP, and
Destination port of the packet.
Configuring an HA cluster
88.
83
Advertisement
Table of Contents
