Skip to main content
leej
Staff
Staff
November 25, 2024

Technical Tip: Synchronization of bridging information between FGSP standalone cluster working as a transparent mode with standalone-config-sync enabled

Description This article describes how bridging information called forward domain is synchronized between FGSP standalone clusters working as a transparent mode with standalone-config-sync enabled.
Scope FortiGate FGSP standalone cluster.
Solution

If traffic flows asymmetrically between FGSP standalone cluster working as a transparent mode, synchronizing bridging information is crucial to deal with traffic.

 

  1. MAC addresses of PC#1 and PC#2 are learned by FGSP-A and copied to FGSP-B. PC#3 is learned by FGSP-A and copied to FGSP-B.

1.jpg

 

  1. The 'TTL' of the copied entries increases and reaches to 2/3 of its configured mac-ttl(300 sec).

    2.jpg

     

     

  2. When the 'TTL' reaches 2/3 of the configured mac-ttl (300 sec), entries are renewed if entries still exist in the bridging information of the FGSP initially learns MAC and copies them to its FGSP peer.

    3.jpg

     

     

  3. If entries are not identical between FGSP standalone clusters. In this screenshot, '80:fa:5b:66:0e:9e' is learned by FGSP-B but not copied to FGSP-A.

    5.jpg

     

     

  4. Restating 'hatalk' on the FGSP-B copies its bridging information to its peer, FGSP-A.

 

4.jpg

 

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT