Fortigate HA Setup Guide

Forum|Forum|7 years ago
May 31, 2019
4 replies
10682 views

I am looking for a detailed guide on HA setup, all I see on the Internet are basic setup steps.

I have a few queries with regards to HA on fortigate

1. Do I need to assign IP addresses on HA interfaces?

2. Do I need to setup the IP addresses on both firewalls for other (non-HA) interfaces? Is it going to get the IP from master during the fail-over?

3. How about MGMT interface in HA pair, do I need to assign IP on both firewalls?

Toshi_Esumi

SuperUser

They used to have a separate handbook only for HA but I can't find it any more. So check HA section of the handbook.

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/c6546940-7683-11e9-81a4-00505692583a/fortios-handbook-60.pdf

All answers should be in there but,

1. No, HB interface needs no IP

2. Regularly backup/slave unit don't need to configure anything else other than HA config and a few part, like MGMT interfaces, that wouldn't be copied over. During the sync up process after becoming a backup/slave, all the other config including interfaces will be copied over from master. Just make sure it would become the backup/slave by reading the primary selection flowchart.

3. You don't have to have an IP on MGMT interface if you don't plan to use outband managment. I use it when when the config becomes un-syncable from the master and needs a hand-modification and upload.

aviltAuthor

New Member

Thank you.

Is the MGMT interface out of band management?

Toshi_Esumi

SuperUser

If you configured it to be in HA config.

Sign up

Login with SSO

Login to the community

Login with SSO