Skip to main content
VinothK
Visitor III
Jul 23, 2025 10:30 AM UTC
Question

HA Configuration

Hi Team,

 

I am planning to configure HA on FortiGate 60F firewalls in Active-Passive mode, and I want to connect two ISP links directly to the firewalls. Is it possible?

4 replies

AEK
SuperUser
SuperUser
Jul 23, 2025 10:35 AM UTC

Hi Vinoth

You need to use a switch between the FGTs and the ISP router.

Some routers may already have an integrated L2 switch.

Translate
AEK
VinothK
VinothKAuthor
Visitor III
Jul 23, 2025 10:43 AM UTC

Hi AEK

 

Thanks for the input.

Is it possible to connect the Forti Gates directly to the ISP router without using a switch?
If the router has an integrated L2 switch or supports multiple interfaces, can we still achieve redundancy or load balancing without adding an external switch?

Translate
AEK
SuperUser
SuperUser
Jul 23, 2025 10:48 AM UTC

If you connect the ISP router to only one FGT then you will lose the internet in case of FGT HA fail-over.

If the router has an integrated L2 switch then you can connect it to both FGTs without the need of additional switch.

Translate
AEK
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024