Fortinet FortiGate FortiGate-5000 Backplane Communications Manual page 30

HA configurations
30
Note: More than one cluster can use the same base backplane channel for HA
communication. To separate HA communications of multiple clusters using the same
channel, configure a different HA Group Name and Password for each cluster.
Unlike hardware configurations involving two FortiSwitch modules per chassis,
when installing only one FortiSwitch module per chassis, the slot position of the
FortiSwitch module becomes an important consideration. Single FortiSwitch-5003
modules should usually be installed in slot 2 for FortiGate-5001SX and
FortiGate-5001FA2 clusters, but slot 1 for FortiGate-5005FA2 clusters. For details
on the effects of slot positioning of a single FortiSwitch module in HA
configurations, see "Slot position and HA heartbeat interface precedence" on
page 34
.
Note: Using a single FortiSwitch-5003 module for HA heartbeat communication introduces
a single point of failure. If this FortiSwitch-5003 module fails or is removed, HA heartbeat
communication will be interrupted. For enhanced reliability, you can add a second
FortiSwitch-5003 module. You can also improve reliability by connecting and configuring
one or more other heartbeat interfaces.
Figure 14: HA cluster with one available base backplane heartbeat interface (through
FortiSwitch-5003 module in slot 2)
5
base
4
backplane
channel 2
3
2
1
5000SM
SMC
10/100
link/Act
2
10/100
link/Act
To configure your HA cluster to use the base backplane interface connected
through a single FortiSwitch, the base backplane interface must be enabled as a
heartbeat interface and:
• if priorities are not equal, have the highest priority of all heartbeat interfaces
• if priorities are equal, be the first interface on the indexed Heartbeat Interface
list
You can satisfy these requirements in multiple ways by adjusting interface priority
or by disabling heartbeats over other interfaces. Required steps vary by the slot
position of the FortiSwitch module, the model of your FortiGate modules, and the
number and Heartbeat Interface list position of other interfaces enabled as
heartbeat interfaces.
FortiGate-5000 Series Version 3.0 MR5 Backplane Communications Guide
FortiGate-5050 base backplane communication
USB
CONSOLE 1 2 3 4 5
PWR ACC
USB
CONSOLE 1 2 3 4 5
PWR ACC
USB
CONSOLE 1 2 3 4 5
PWR ACC
5050SAP
SERIAL SERIAL
1
6 7 8
STA IPM
6 7 8
STA IPM
6 7 8
STA IPM
POWER
5000SM
SMC
10/100
link/Act
10/100 1
2
link/Act
01-30005-0423-20070829