New Member

Question

I have 2 fortigate with HA A-P need to connect with 2 Cisco Layer 3 switch

Forum|Forum|1 year ago
December 8, 2024
9 replies
2286 views

core switch working as layer 3 routing per vlans

and the two fortigate working as HA A-P

i need two know how the connection works

the design also , if there more the idea please need to know all possible solutions and if there any topology diagram the clarify the solution

FortiGate

sjoshi

Staff

Hi,

You need to setup LACP between the FGT and the cisco Switches

Refer:-

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Connecting-HA-FortiGates-to-Cisco-Nexus-switches/ta-p/266091

Thanks, Salon

SaeedAbdelHalimAuthor

New Member

it`s not nexus , it`s CAT switch , and it`s layer 3 all the routing vlan done one it

DPadula

Staff & Editor

Hi Saeed.
Are those 2 cisco switches connected to each other as a stack or independents?
If the Cisco switches are setup as stack, you can use MCLAG instead.

Regards

DPadula

SaeedAbdelHalimAuthor

New Member

no it`s not stacked

Toshi_Esumi

SuperUser

If the switches are stacked, you just need to have two connections (each could be LAG/Port-channel for switch side redundancy) to both unit, then span the same VLANs to both. Remember, in A-P HA only one unit is active. Then it would simply fail-over from one unit to another when an HA event happens.

Toshi

SaeedAbdelHalimAuthor

New Member

dear i all vlan on core switch not fortigate

Toshi_Esumi

SuperUser

If they're not stacked, and no VLANs are coming to the FGTs, it's simple.
If those two switches are cascaded, you need to connect from the root switch to both FGTs on the same broadcast domain. If those are "parallel" each need to connect both FGTs with separate subnets because those switches are independent L3 routers.
It's up to L3 design on the L2/L3 router/switch side.

Toshi

SaeedAbdelHalimAuthor

New Member

cloud you please provide my with design

Toshi_Esumi

SuperUser

What I implied with my previous message was without knowing your L3 design between those two L3 switch/routers with the FGT(in HA), and some key L3 topology on the Cisco side, it's impossible to design it.

Toshi

Sign up

Login with SSO

Login to the community

Login with SSO