Can we have VDOM on Active passive cross AZ cluster in AWS.

1 reply
587 views

As per the following link, can we have vdom on cloud firewalls. Wil they function properly?

https://docs.fortinet.com/document/fortigate-public-cloud/7.2.0/aws-administration-guide/229470/deploying-fortigate-vm-active-passive-ha-aws-between-multiple-zones

FortiGate

Atul_S

Staff & Editor

Hi,

Yes, you can have VDOM setup, but the recommendation is not to sync the VDOM-specific interfaces, routing, and VIP in a unicast HA setup. Since each AZ has its identical instances, ARP would not pass across an AZ. Any attempt to sync VDOM will break the HA.

Thanks,

Sign up

Login with SSO

Login to the community

Login with SSO