Skip to main content
Camshaft007
Camshaft007
New Member
September 22, 2016
Question

FTNT-FAC HA Licensing Planning Question/Help

  • September 22, 2016
  • 1 reply
  • 3251 views

So, I'm in the process of spinning up my Shinny new FortiAuth VMs and would like to put them in an HA/LB-Cluster.. Documentation - CHECK

Documentation on Licensing Sync between HA/LB:  Vague at best and doesn't really exist or provide details. 

 

However, I am hesitant to apply my FAC licenses to any of my VMs due to my lack of understanding how Licensing works in a HA/LB configuration.. 

Do I or should I load all my FAC licenses on one box, then hope they sync between the two?  Do I need to split my FAC licenses between them?  What if one of the boxes fails and the LB/Slave takes over as primary?  Will it inherit the licenses from the LB/Master?  Will the FortiMobile Token licenses sync between the Two?

 

Any guidance on this matter is much appreciated! 

 

BTWS: FAC-OS-4.1.2

 

Thank you in advance! 

 

    1 reply

    ergotherego
    ergotherego
    New Member
    September 24, 2016

    I just started setting up my FAC VMs and my SE told me this:

    [ul]
  • User licenses need to be installed on both. So you need double the quantity.
  • Token licenses only need to be installed on one.[/ul]

    And if you are doing HA across data centers (via L3) you have to go active-active in order to have the tokens apply across both systems.

    • theFWdude
    theFWdude
    New Member
    October 5, 2016

    Thank's Ego for the reply.  So, I did  purchase double the quantity (that's so dumb BTW!!!) and put them on both and put the mobile token on the "PRIMARY" and both FAC's are in sync.  The HA/L3 is Master/Slave A/A btw.  Agian, thanks for you help. 

    ergotherego New Member 

    Terms & ConditionsAccessibility statement