- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Active Active HA
When we configure the fortigate as Active-Active this mean we will have :
- 2 cable from both fortinet to the internet
- 2 cable from both fortinet to the LAN
- 1 cable for heartbeat.
Now i want to focus 2 cable from fortinet to the LAN. Should the LAN ip address on the fortigate side have different ip or same ip? If use same ip address, what should we configure on the core switch port? Should 2 ports on the core switch configured as L3 LACP, or should we configure as L3 but using VLAN?
- Labels:
-
FortiGate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @HS08
On HA Active-Active scenario there should be different IP on LAN connection.
Please review the following guide and article:
https://docs.fortinet.com/document/fortigate/7.2.10/administration-guide/357558/ha-active-active-clu...
https://community.fortinet.com/t5/FortiADC/Technical-Tip-How-to-failover-traffic-group-to-the-other-...
BR
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @ndumaj
I can't find any guide that we should use different i address on LAN for active active scenario. Can you help me by give the screenshot maybe?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi HS08,
Please refer below article for deployment.
https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/357558/ha-active-active-cluster-setup
Salon Raj Joshi
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @sjoshi
Already read the article, but still confuse related ip address configuration for active active scenario. Should each LAN interface from fortinet use same ip address or different ip address?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Both the FGT will have the same IP address for all interface
Salon Raj Joshi
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How about the mac address, will be same or different?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
you can refer above article and go through it once..
After that if you have still any query let me know
Salon Raj Joshi
![](/skins/images/314F488D15A2016126B094729A0E57E8/responsive_peak/images/icon_anonymous_message.png)