Setting Up A Session-Aware Load Balanced Cluster - Fortinet FortiController-5103B Session-Aware Load Balancer Manual

FortiController-5103B system

Setting up a session-aware load balanced cluster

FortiController-5103B Session-Aware Load Balancer Guide
10-500-161552-20140822
http://docs.fortinet.com/
A FortiController-5103B cluster consists of one or two FortiController-5103B boards and
up to 12 FortiGate-5000 boards. To form a cluster you must install the
FortiController-5103B board in chassis slot 1, optionally install a second
FortiController-5103B board in chassis slot 2, and select the chassis slots that will
contain workers that will join the cluster.
You then install the FortiGate-5000 workers and set them to forticontroller mode. The
boards find each other in the chassis and form a cluster. The FortiGate-5000 board with
the lowest slot number becomes the primary worker and the others become subordinate
workers.
You connect the FortiController-5103B 1 to 8 front panel interfaces to networks such as
the Internet or various internal networks. The workers see these interfaces are named
fctrl/f1 to fctrl/f8.
The FortiController-5103B load balances all sessions among all of the FortiGate-5000
boards in the cluster except IPsec VPN, SSL VPN, and routing sessions, which are
handled by the primary worker.
Figure 2 shows a FortiController-5103B cluster consisting of one FortiController-5103B
and three FortiGate-5001C boards. FortiController-5103B front panel interface 1 (fctrl/f1)
is connected to the Internet and front panel interface 3 (fctrl/f3) is connected to an
internal network.
FortiController-5103B session-aware load balancing
11