Active-Active Cluster Packet Flow - Fortinet FortiGate FortiGate-800 Installation And Configuration Manual

High availability

Active-Active cluster packet flow

FortiGate-800 Installation and Configuration Guide
Weight values are entered in order according to the priority of the units in the cluster.
For example, if you have a cluster of three FortiGate units, you can enter the following
command to configure the weight values for each unit:
set system ha weight 1 3 3
This command has the following results:
• The first connection is processed by the primary unit
• The next three connections are processed by the first subordinate unit
• The next three connections are processed by the second subordinate unit
The subordinate units process more connections than the primary unit, and both
subordinate units, on average, process the same number of connections.
This section describes packet flow through an active-active HA cluster. The cluster
consists of two FortiGate units (primary and subordinate). Cluster interfaces are
connected using switches.
• NAT/Route mode packet flow
• Configuring switches to work with a NAT/Route mode cluster
• Transparent mode packet flow
Figure 18: Active-active HA packet flow
Switch 1
Client
Active-Active cluster packet flow
HA cluster
Primary Unit
Subordinate Unit
Switch 2
Server
89