Skip to main content
jpever
New Member
October 15, 2024
Question

Multiple unicast-hb-peer ip in same subnet in fortigate

  • October 15, 2024
  • 1 reply
  • 773 views

Currently we are having Fortigate VM deployed in AWS in different regions.

We have only one port configured for HA-SYNC between two fortigate VM as shown in this diagram. 

https://docs.fortinet.com/document/fortigate-public-cloud/7.4.0/aws-administration-guide/229470/deploying-fortigate-vm-active-passive-ha-aws-between-multiple-zones

 

On the diagram it was given with 10.0.2.11 to primary

and 10.0.12.11 to secondary

 

Question :

Can we configure another HA-SYNC interface (for eg: port6) on the same subnet range as Port4 as shown in diagram above. Below will be the configuration 

10.0.2.12 to primary with port 6

10.0.12.12 to secondary with port6

 

 

1 reply

Dhruvin_patel
Staff
Staff
October 15, 2024

Greetings!

 

The same subnet range can be configured after enabling the subnet overlap setting.

# config system settings
     set allow-subnet-overlap [enable/disable]
 end

 

Reference Document: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-subnet-overlap-to-set-IP-addresses-of/ta-p/191639

 

Regards!

If you have found a solution, please like and accept it to make it easily accessible for others.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!