Skip to main content
Lucky-Cement
Lucky-Cement
New Member
September 18, 2025
Question

HA for fortiAuthenticator on different subnet

  • September 18, 2025
  • 1 reply
  • 313 views

Hi everyone,

 

I am planning to shift my authenticator HA to my DR location, primary will be in Primary site and secondary will on DR site, they both will have different subnets and all IP addresses will be different as it has to be configured on DR site, kindly share your input on how I can make it work

1 reply

tbarua
Staff
tbarua
Staff
September 19, 2025

Hi @Lucky-Cement, 

In that case , Node-Specific Default Gateway is the correct option for you. 

Node-Specific Default Gateway is an option if there are clusters in two different data centers and the default gateway for those data centers is different. Then you need to configure that option to be the correct gateway if failover occurs so that the node has access to the network.

Please find the kB for more details regarding Node :

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Node-specific-gateway-setting-in/ta-p/386762

 

If you have found a solution, please like and accept it to make it easily accessible to others.

Thank you!

Terms & ConditionsAccessibility statement