Skip to main content
vrajkumar09
vrajkumar09
New Member
September 20, 2016
Question

Fortinet HA Cluster active-active

  • September 20, 2016
  • 1 reply
  • 3341 views

Hi There,

 

   We have Fortinet Firewall 3815 series running in HA on active-active mode. We have connected each firewall to our HP core switch running in VRF mode. It is not criss cross. We connected like Firewall1 to Switch1 and FW2 to Sw2. Firewalls are interconnected, Switches are interconnected etc. But We cannot see the second firewalls link being used for sending traffic to LAN. Is it an expected behaviour? Even the firewalls are active active only one link from the master to switch will be used to send traffic?

 

 

    1 reply

    cbun
    cbun
    New Member
    September 20, 2016

    This is how it should work: Only the interfaces on one unit have traffic.

    In my case I have problems in active-active mode as interfaces on both units are used.

    (I have two routers with VRRP in front of the Fortigate units)

    emnoc
    emnoc
    New Member
    September 20, 2016

    Do you have multi-vdim? do you have  virtual cluster enabled? Are you running ACT-ACT with one vodka ( aka root ) ? do you have "load-balance-all" enable  if running HA Act-Act one vdom?

     

    On the  the 2nd unit ( the one with little to know traffic ) have you ran a drag sniffer packet <interface_name" "not ip" and see what yo get ? Same for your hb-interfaces ?

     

     

     

    Terms & ConditionsAccessibility statement