Fortinet FortiGate FortiGate-5001 Administration Manual page 100

HA
18
100
Repeat this procedure for all of the FortiGate units in the cluster then continue with
connect a FortiGate HA cluster" on page
To connect a FortiGate HA cluster
Use the following procedure to connect a cluster operating in NAT/Route mode or
Transparent mode. Connect the cluster units to each other and to your network. You
must connect all matching interfaces in the cluster to the same hub or switch. Then
you must connect these interfaces to their networks using the same hub or switch.
Fortinet recommends using switches for all cluster connections for the best
performance.
Inserting an HA cluster into your network temporarily interrupts communications on
the network because new physical connections are being made to route traffic through
the cluster. Also, starting the cluster interrupts network traffic until the individual
cluster units are functioning and the cluster completes negotiation. Cluster negotiation
normally takes just a few seconds. During system startup and negotiation all network
traffic is dropped.
1 Connect the cluster units.
Connect the matching interfaces of each FortiGate-5001 blade to the same switch and
connect that switch to a network. In HA mode, you can connect all 8 FortiGate-5001
interfaces to networks
Figure 37: HA network configuration
Internal Network
Hub or
Switch
Port 3
Port 1
USB 1 2 3 4
CONSOLE
PWR ACC
USB
CONSOLE 1 2 3 4
PWR ACC
Port 1 Port 3
01-28008-0013-20050204
100.
PSU A
PSU B
5 6 7 8
STA IPM
5 6 7 8
STA IPM
Internet
System Config
"To
Hub or
Switch
Router
Fortinet Inc.