Active Active HA

Forum|Forum|1 year ago
November 25, 2024
2 replies
1819 views

When we configure the fortigate as Active-Active this mean we will have :

2 cable from both fortinet to the internet
2 cable from both fortinet to the LAN
1 cable for heartbeat.

Now i want to focus 2 cable from fortinet to the LAN. Should the LAN ip address on the fortigate side have different ip or same ip? If use same ip address, what should we configure on the core switch port? Should 2 ports on the core switch configured as L3 LACP, or should we configure as L3 but using VLAN?

FortiGate

ndumaj

Staff

Hi @HS08

On HA Active-Active scenario there should be different IP on LAN connection.

Please review the following guide and article:
https://docs.fortinet.com/document/fortigate/7.2.10/administration-guide/357558/ha-active-active-cluster-setup
https://community.fortinet.com/t5/FortiADC/Technical-Tip-How-to-failover-traffic-group-to-the-other-node-in/ta-p/270327

BR

HS08Author

Visitor III

Hi @ndumaj

I can't find any guide that we should use different i address on LAN for active active scenario. Can you help me by give the screenshot maybe?

sjoshi

Staff

Hi @HS08,

Please refer below article for deployment.

https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/357558/ha-active-active-cluster-setup

https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/357558/ha-active-active-cluster-setup

Thanks, Salon

HS08Author

Visitor III

Hi @sjoshi

Already read the article, but still confuse related ip address configuration for active active scenario. Should each LAN interface from fortinet use same ip address or different ip address?

sjoshi

Staff

Both the FGT will have the same IP address for all interface

Thanks, Salon

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded