Fortinet FortiGate FortiGate-1000 Administration Manual page 93

System config
FortiGate-1000 Administration Guide
Inserting an HA cluster into your network temporarily interrupts communications on
the network because new physical connections are being made to route traffic through
the cluster. Also, starting the cluster interrupts network traffic until the individual
FortiGate units in the cluster are functioning and the cluster completes negotiation.
Cluster negotiation normally takes just a few seconds. During system startup and
negotiation all network traffic is dropped.
1 Connect the cluster units.
• Connect the internal interfaces of each FortiGate unit to a switch or hub connected
to your internal network.
• Connect the external interfaces of each FortiGate unit to a switch or hub connected
to your external network.
• Optionally connect ports 1, 2, and 3 of each FortiGate unit to switches or hubs
connected to other networks.
• Connect the 4/HA interfaces of the FortiGate units to another switch or hub.
Figure 31: HA network configuration
Internal Network
Hub or
Switch
2 Power on all the FortiGate units in the cluster.
As the units start, they negotiate to choose the primary cluster unit and the
subordinate units. This negotiation occurs with no user intervention and normally just
takes a few seconds.
You can now configure the cluster as if it is a single FortiGate unit.
Esc Enter
Esc Enter
01-28006-0009-20041105
External
Internal
1 2 3 4 / HA INTERNAL EXTERNAL
HA
HA
1 2 3 4 / HA INTERNAL EXTERNAL
Internal
External
HA
Hub or
Switch
Router
Internet
93