Skip to main content
aagrafi
aagrafi
New Member
November 17, 2016
Question

Joining two FortiGate clusters with VRRP

  • November 17, 2016
  • 1 reply
  • 8314 views

Hello,

Can we build two separate clusters with FortiGates and join them with VRRP, so that when the first cluster (primary cluster) goes down, the second cluster (secondary cluster) will come up?

 

The reason I'm asking this, is because we want to extend an existing cluster, but the FortiGates we have are not of the same type as those in the cluster.

 

Thanks

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    November 17, 2016

    I don't see a reason not to work. It should be the same as setting up VRRP between a FGxx and another single FGyy as long as VRRP is configurable on the interface (can't configure directly on virtual-switch/switch-interface, if the model supports them).

    emnoc
    emnoc
    New Member
    November 18, 2016

    That should be doable but beware of ASYMMETRICAL issues within the two different clusters but vrrp has been problematic in  earlier  fortiOS version.  I would stray away from   VRRP at all cost and beaware  of any  hosts that doesn't do GARP response very good or at all/

     

    if you truly have 2x two-clusters

     

    e.g

     

    FGT XYZ  master1 and slave1  VRRP grp  prio 120

    FGT LMN  master2 and slave2  VRRP grp  prio 90

     

    And want to do VRRP between the two that should be doable ( never seen it done tho ).

     

     

    Typically you don't mix HA  protocol and I only used VRRP when we needed HA and the two models  DID NOT match. But I  never seen any one try to do VRRP within cluster to another cluster.

     

     

     

    Ken

    Terms & ConditionsAccessibility statement