Inter-Chassis Ha Configurations - Fortinet FortiGate FortiGate-5000 Backplane Communications Manual

FortiGate-5020 base backplane communication
6
7

Inter-chassis HA configurations

FortiGate-5000 Series Version 3.0 MR5 Backplane Communications Guide
01-30005-0423-20070829
• If interface priorities are not all equal, set the base backplane interfaces'
priority to a higher value than all other interfaces.
• If interface priorities are all equal, set the base backplane interfaces' priority to
a higher value than all other interfaces, or disable interfaces listed above the
base backplane interfaces in the Heartbeat Interface list. For some FortiGate
models or configurations of other HA interfaces, this may mean that no change
is required. The table below describes where changes are required, and if so,
what kind.
Table 7: Changes to configure base backplane HA, assuming initially equal interface
priorities
Model Other HA interfaces
enabled?
FortiGate-5001SX No
Yes
FortiGate-5001FA2 No
Yes
FortiGate-5005FA2 No
Yes
If you want to select a different base backplane interface as the primary heartbeat
interface, increase its priority.
Select OK.
Base backplane HA clustering between multiple FortiGate-5020 chassis is not
supported. To configure HA for FortiGate modules installed in separate
FortiGate-5020 chassis, you must instead connect the heartbeat through
FortiGate module front panel interfaces.
Note: For enhanced reliability, connect and configure heartbeat failover between two or
more non-base backplane interfaces.
Figure 20 on page 42 shows an HA cluster of four FortiGate-5001SX modules
installed in two separate FortiGate-5020 chassis. For each FortiGate module in
the example cluster:
• port1 connects to an internal network switch
• port2 connects to an external network switch, which is connected to the
Internet
• port7 and port8 connect to switches that handle only heartbeat traffic
• port3 to port6 are not used
Inter-chassis HA configurations
HA interface config change
Increase priority of port9, or disable
non-base backplane HA interfaces.
If port1 is an HA interface, increase
priority of port10 or disable port1.
Increase priority of port9, or disable
non-base backplane HA interfaces.
If port1 is an HA interface, increase
priority of port10 or disable port1.
41