Solved
FGCP over FGSP sharing HA ports
Hello
We have 2 pairs of FortiGates, FGCP over FGSP
What can be the side effects of having HA1 & HA2 ports for synchronizing both FGSP and FGCP at the same time?
FGCP is a Layer 2 heartbeat that specifies how FortiGate units communicate in an HA cluster and keeps the cluster operating.
Whilst session synchronization between FGSP members uses an L3 connection over the peer IP by default. So HA1 and HA2 can have IP addresses configured and that will be used by FGSP members.
So technically there is no issue using HA1 and HA2 for both type of synch. The problem i see is in the design. If HA1 and HA2 for some reason go down, you will lose both synchronizations, and you will have strange failover situations (probably even split-brain) This is because HA1 and HA2 are recommended to be directly connected between 2 fortigates. But if you use HA1 and HA2 even for FGSP, i thing that you will have to use switch and router devices in between.
Knowing this, the problem is all design, not technical.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
