Fortinet FortiGate FortiGate-5003 Quick Start Manual page 2

HA setup
Clustering FortiGate-5001 Antivirus Firewall modules
The FortiGate-5003 Switch Blade module is an HA component that is designed for use with the FortiGate-5050 and FortiGate-5140 chassis to
provide full HA clustering capabilities between the FortiGate-5001 modules. The FortiGate-5003 acts as the switch, providing automatic connection
through port 10 the backplane of the chassis. Using two FortiGate-5003 modules provides redundant HA interconnects with no single point of
failure.
For information on configuring the FortiGate-5001 module for HA see the FortiGate-5000 series Installation Guide.
High Availability Modes
Active-Active
Active-Passive
All members of the HA cluster must be set to the same HA mode.
FortiGate-5001 clusters using a single FortiGate-5003
FortiGate 5001 Blade
FortiGate 5001 Blade
FortiGate 5001 Blade
FortiBlade 5003 Switch
HA Interface
FortiGate 5001 Blade
FortiGate 5050 SM
Clustering FortiGate-5000 series chassis
The FortiGate-5003 Switch Blade module provides full HA clustering capabilities between FortiGate-5050 and FortiGate-5140 chassis to provide
inter-chassis communication. The FortiGate-5003 acts as the switch, providing automatic connection through port 10 the backplane of the chassis.
The diagrams shown also apply to the FortiGate-5140 chassis.
USB
CONSOLE 1 2 3 4 5 6 7 8
5 PWR ACC STA IPM
USB 1 2 3 4 5 6 7 8
CONSOLE
4
PWR ACC STA IPM
USB
CONSOLE 1 2 3 4 5 6 7 8
3
STA IPM
PWR ACC
2
USB
CONSOLE 1 2 3 4 5 6 7 8
1
STA IPM
PWR ACC
CRITICAL
MAJOR
ShMC
ALARM MINOR
2 ALARMS RESET
FortiGate-5050 inter-chassis cluster using
redundant FortiGate-5003 modules.
Using two FortiGate-5003 in both chassis provides
redundant inter-chassis communication with no single
point of failure.
Load balancing and failover HA. Each FortiGate unit in the HA cluster actively processes connections and
monitors the status of the other FortiGate units in the cluster. The primary FortiGate unit in the cluster
controls load balancing.
Failover HA. The primary FortiGate unit in the cluster processes all connections. All other FortiGate units in
the cluster are passively monitor the cluster status and remain synchronized with the primary FortiGate unit.
T ray
FortiGate 5050 SM
USB
CONSOLE
5 PWR ACC
USB
CONSOLE
4
PWR ACC
USB
CONSOLE
3
PWR ACC
2
POWER
ON
USB
CONSOLE
1
PWR ACC
HOT SWAP
ShMC
ShMC
STATUS
2
1
FortiGate-5001 clusters using a redundant FortiGate-5003
FortiGate 5001 Blade
FortiGate 5001 Blade
FortiGate 5001 Blade
F an
FortiBlade 5003 Switch
HA Interface
FortiBlade 5003 Switch
HA Interface
FortiGate 5050 SM
1 2 3 4 5 6 7 8
STA IPM
1 2 3 4 5 6 7 8
STA IPM
1 2 3 4 5 6 7 8
STA IPM
POWER
ON
1 2 3 4 5 6 7 8
STA IPM
CRITICAL
MAJOR
HOT SWAP
ShMC
STATUS
ALARM MINOR
ALARMS RESET 1
USB 1 2 3 4 5 6 7 8
CONSOLE
5 PWR ACC STA IPM
USB 1 2 3 4 5 6 7 8
CONSOLE
4
PWR ACC STA IPM
USB 1 2 3 4 5 6 7 8
CONSOLE
3
PWR ACC STA IPM
2
1
CRITICAL
MAJOR
HOT SWAP
ShMC
STATUS
MINOR
ALARM
ALARMS RESET
2
FortiGate 5050 SM
FortiGate inter-chassis cluster using a single
FortiGate-5003 module
Using the FortiGate-5003 for intercommunications
provides inter-chassis HA links.
CONSOLE USB 1
5 PWR ACC
USB 1
CONSOLE
4
PWR ACC
USB 1
CONSOLE
3
PWR ACC
2
POWER
ON
1
ShMC
ShMC
2
1
F an
T ray
2 3 4 5 6 7 8
STA IPM
2 3 4 5 6 7 8
STA IPM
2 3 4 5 6 7 8
STA IPM
POWER
ON
CRITICAL
MAJOR
HOT SWAP
ShMC
STATUS
MINOR
ALARM
ALARMS RESET 1