Skip to main content
Schartmueller
Schartmueller
New Member
February 22, 2011
Question

HA-Cluster and PPPoE

  • February 22, 2011
  • 1 reply
  • 2078 views
HA does not provide session failover for PPPoE, DHCP. If one or more FortiGate unit interfaces is dynamically configured using DHCP or PPPoE you cannot switch to operating in HA mode. Anyway I need some configuration with HA, PPPoE and IPSEC-VPN because some ISP' s only supports connections with PPPoE. Has anyone else similar issues, VPN, HA and PPPoE, does anyone has a solution, maybe some router with VPN-passthrough ? Many Thanks Jo Schartmueller

    1 reply

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    February 22, 2011
    Hi, yes exactly, you' ve named the solution: provide a router for your WAN line and feed the ethernet to the FG cluster (switch). In this case you configure the credentials on the router. VPN gateway will still be the FG cluster, configure the FG as " exposed host" or similar. From experience, make sure the router doesn' t interfere with IPSec for its own purposes...
    Terms & ConditionsAccessibility statement