Skip to main content
FortiNoob3
Explorer
May 6, 2025
Question

HA Active-Active Deployment – Clarification on WAN Connectivity Requirements

  • May 6, 2025
  • 1 reply
  • 566 views

Hello,

I want to implement a FortiGate 600F HA Active-Active cluster, with the ISP’s equipment in bridge mode, providing a WAN IP via DHCP. Can you tell me if a router is needed between the cluster and the ISP’s equipment?

1 reply

sw2090
SuperUser
SuperUser
May 7, 2025

that depends on your ISP. However you must connect every cluster node to that wan. 

That alone might require a switch or router in between to have enough ports.

In or case (that's active-passive cluster here anyways) the ISP router/box only gives us one port so we needed the router and a switch to be able to connect all nodes.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!