Connecting Fortigate Modules To Each Other; Connecting Fortigate Modules To The Network - Fortinet FortiGate FortiGate-5000 Backplane Communications Manual

Network configurations

Connecting FortiGate modules to each other

Connecting FortiGate modules to the network

22
In addition to linking base backplane traffic between FortiGate modules, you can
use FortiSwitch modules to link traffic between FortiGate modules' base
backplane interfaces and your network, or the Internet. Connecting a ZRE
interface to the network links the base backplane, and any connected FortiGate
modules, to the network.
Required steps vary by whether you want to use the base backplane interfaces to
connect FortiGate modules to each other, or to the network. These scenarios are
not mutually exclusive; you can simultaneously provide both.
Note: You can also combine network configurations with HA configurations to send both
traffic types through the base backplane channel(s). However, because heavy heartbeat or
network traffic load can interfere with the other traffic type's performance, it is generally
preferable to separate those traffic types to different base backplane interfaces. This
requires two FortiSwitch modules per chassis.
By installing one or two FortiSwitch modules per chassis, you can connect
FortiGate modules to each other through their base backplane interfaces.
Hardware configurations are identical to single and multiple chassis configurations
for HA traffic, except the additional possibility of connecting FortiSwitch modules
that have been installed in different slot numbers. Connecting FortiSwitch
modules located in different slot numbers allows communication between the two
base backplane channels.
Configure FortiGate modules to communicate through the base backplane
interfaces as you would other interfaces.
By installing one or two FortiSwitch modules per chassis, you can connect
FortiGate modules to the network or Internet through their base backplane
interfaces.
There are several ways you can connect FortiGate modules to the network,
depending on your available hardware and other goals such as hardware
redundancy.
• The most basic way to connect FortiGate modules to the network through the
base backplane is to connect one of the FortiSwitch module's ZRE interfaces
to the network.
• By installing a second FortiSwitch module per chassis, you can provide a
redundant network or Internet connection.
• By connecting ZRE interfaces of other chassis' FortiSwitch modules to the
ZRE interface of the FortiSwitch module connected to the network, you can
provide a shared network or Internet connection.
Configure FortiGate modules to communicate with the network through the base
backplane interfaces as you would other interfaces.
FortiGate-5000 Series Version 3.0 MR5 Backplane Communications Guide
FortiGate-5140 base backplane communication
01-30005-0423-20070829