FortiGate in HA - Cabling question

Hi @FortiGateAdmin 

How do you want to connect one LAN interface to 2 switches at the same time? There is an option for redundant interface on FortiGate

REF:  https://community.fortinet.com/t5/FortiGate/Technical-Tip-Creating-a-redundant-link/ta-p/196577

Abdel

Exactly, I can't connect one LAN interface to two switches. Hence the question above.

From your link I see the following configuration:

FortiGate A in server room 1:
I create a redudant interface with (as an example) port 4 and port 5 as member. Port 4 to Switch 1, Port 5 to Switch 2.
If now switch 1 fails, the traffic from port 5 is forwarded to switch 2. Correct? How do I build this setup correctly if the FortiGate is configured in a HA (active/passive)? In the second server room, I would also connect the FortiGate B with port 4 to Switch 1 (second server room) and port 5 to Switch 2 (second server room).
Do these interfaces also have to be configured as monitored interfaces in the HA configuration? Or should I only monitor the external (Internet) interfaces there?

Hi @FortiGateAdmin ,

This depends on what is connected to the switches and how they operate.. are they independent or function as a logical switch?

Abdel

Hey @anignan,

the switches operate independent. 

Ok, no redudant interface?

I've made a little drawing that might better show how I envision it and if it can be done that way.

Hi @FortiGateAdmin ,

If your switches are independent use hardware switch but a logical switch use redundant or STP will kick in and block one port to prevent loop... How is the ESXi host configured?

Can you name in your drawing how the switches are connected together? 

Abdel

the four switches are connected via 10g sfp to each other with stp configuration.

the esx host is normal configured with 4x lan to switch 1 and 4x lan to switch 2.

In this case try redundant interface since STP is running on the switches no matter what port is active traffic should go through...

Abdel