Skip to main content
VinothK
VinothK
Visitor III
July 23, 2025
Question

HA Configuration

  • July 23, 2025
  • 1 reply
  • 643 views

Hi Team,

 

I am planning to configure HA on FortiGate 60F firewalls in Active-Passive mode, and I want to connect two ISP links directly to the firewalls. Is it possible?

1 reply

AEK
SuperUser
AEK
SuperUser
July 23, 2025

Hi Vinoth

You need to use a switch between the FGTs and the ISP router.

Some routers may already have an integrated L2 switch.

AEK
    VinothK
    VinothKAuthor
    Visitor III
    July 23, 2025

    Hi AEK

     

    Thanks for the input.

    Is it possible to connect the Forti Gates directly to the ISP router without using a switch?
    If the router has an integrated L2 switch or supports multiple interfaces, can we still achieve redundancy or load balancing without adding an external switch?

    AEK
    SuperUser
    AEK
    SuperUser
    July 23, 2025

    If you connect the ISP router to only one FGT then you will lose the internet in case of FGT HA fail-over.

    If the router has an integrated L2 switch then you can connect it to both FGTs without the need of additional switch.

    AEK
      Terms & ConditionsAccessibility statement