Skip to main content
firdausi12
firdausi12
Explorer III
August 7, 2023
Question

HA Between Different Datacenters

  • August 7, 2023
  • 1 reply
  • 1657 views

Hello Team,

We have 2 datacenters across different states (kano / abuja) and we want to deploy one of our HA Availability each to different  locations due to redundancy.  Please keep in mind we have a VPN tunnel accross.

Please i need someone to help and guide me on how to achieve that in steps .

 

Regards,

Firdausi Nababa

1 reply

rvijayaraj
Staff
rvijayaraj
Staff
August 7, 2023

Hi , 

There are few configuration which needs to enabled when setting up a HA in a ipsec vpn configured firewalls as below : 

1. session-pickup under HA settings

config vpn ipsec phase1-interface 

edit (vpn-name) 

set ha-sync-esp-seqno enable 

end

 

 

2. ha-sync-esp-seqno under IPsec phase1-interface settings 

config system ha

set session-pickup enable 

end

 

The below docs will help you in understanding the requirement for enabling the commands : 

 

https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/111309/ipsec-vpn-in-an-ha-environment

https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPSec-VPN-in-HA-Environment/ta-p/195849

 

Regards,

Roshan 

 

 

 

 

 

 

 

medaabreu
medaabreu
New Member
August 9, 2023
@rvijayaraj wrote:

Hi , 

There are few configuration which needs to enabled when setting up a HA in a ipsec vpn configured firewalls as below : 

1. session-pickup under HA settings

config vpn ipsec phase1-interface 

edit (vpn-name) 

set ha-sync-esp-seqno enable 

end

 

 

2. ha-sync-esp-seqno under IPsec phase1-interface settings 

config system ha

set session-pickup enable 

end

 

The below docs will help you in understanding the requirement for enabling the commands : 

 

https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/111309/ipsec-vpn-in-an-ha-environment

https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPSec-VPN-in-HA-Environment/ta-p/195849

 

Regards,

Roshan

Thanks for this - much appreciated!

Terms & ConditionsAccessibility statement