Technical Tip: Proxmox and FortiGate HA cluster configuration

Description

This article describes how to configure Proxmox and FortiGate to build a High Availability (HA) cluster.

Scope

FortiGate, Proxmox.

Solution

This article assumes that two FortiGate devices are already deployed, with management access available via GUI and CLI, and properly licensed.

To configure the HA cluster, perform the following steps:

• Navigate to Datacenter -> pve, then go to System -> Network:

• In the displayed window, select 'Create' and then choose 'Linux Bridge'. Set the name to 'ha1' and select:

• Set the name to 'ha1' and select 'Create':

• Repeat the same procedure to create a second bridge named 'ha2', which will be used for the redundant HA interface.

• After creating both interfaces, select 'Apply Configuration':

• Verify that in the 'Active' column, the status changes from 'No' to 'Yes':

• Once completed, it will be possible to add the interfaces to the FortiGate. To do so, select the VM, select 'Hardware', then select 'Add', and finally 'Network Device':

• Select 'ha1' in 'Bridge', uncheck 'Firewall', and select 'Add':

• Repeat the same procedure for 'ha2' on the same VM.

• Add 'ha1' and 'ha2' to the other VM that will form the cluster, following the same steps:

• On the FortiGate, it will be possible to see the two newly added interfaces:

• The next step is to configure the cluster. In this example, an 'Active-Passive' HA setup will be configured:

• In this example, two monitored interfaces and two heartbeat interfaces are configured. Select 'OK':

• It is now necessary to apply the same configuration to the other FortiGate. The configuration will be done via CLI. In the HA configuration, select 'Edit in CLI':

• Copy the configuration and paste it into a text editor. Change the priority from 255 to 100. Apply this configuration to the other FortiGate:

• The cluster will start synchronizing and will be fully synchronized shortly:

Related documents:

• Technical Tip: How to install FortiGate VM on Proxmox

• HA active-passive cluster setup