FortiADC Clustered Setup

[defsdefs12]

Hi guys,

We are starting to deploy 2x4 Clustered FortiADC redundancy on 2 Different locations, would like to ask if you have a reference configuration sample guide in which it indicates best practices, standard hardening configurations and HA Configurations. 

Thank you in advance.

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[Anthony_E]

Hi @shafiq23,

May I request your FortiADC experience, please?

Thanks a lot in advance.

[Anthony_E]

Hi,

Did you already have a look at this document:

https://docs.fortinet.com/document/fortiadc/7.4.5/handbook/984372/deploying-an-active-active-cluster

Regards,

[shafiq23]

Hey @defsdefs12,

I'd suggest to start with understanding the HA deployment modes and redundancy objectives to be met. You can refer below documentation as it provides sample configuration, topology, how traffic flows in HA and troubleshooting steps.

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/f7e1ee25-5f4e-11ea-9384-005056...

Thanks.

Regards,

Shafiq

[sjoshi]

Hi defsdefs12,

To set up a clustered FortiADC redundancy across two different locations, you can follow these general steps:

1. Ensure all FortiADC appliances are licensed and registered with Fortinet Customer Service & Support website.
2. Physically link the FortiADC appliances using a crossover cable or through a switch for heartbeat and synchronization traffic.
3. Configure the secondary node with higher Device Priority than the primary node.
4. Configure the primary node with lower Device Priority than the secondary node.
5. Save the HA configuration changes on both nodes.
6. The primary node will automatically push its configuration to the secondary node.
7. Ensure link health, remote IP monitor health check results, and other criteria are met for proper failover.

Docs:-
https://docs.fortinet.com/document/fortiadc/7.6.0/administration-guide/984372/deploying-an-active-ac...

[defsdefs12]

Is Active-Passive setup supported with only 2 Nodes? 

Is it possible to do with 4 nodes? 

[shafiq23]

Hello @defsdefs12,

FortiADC 7.6.0 now supports HA cluster up to 8 member nodes. Please refer New Features documentation.

https://docs.fortinet.com/document/fortiadc/7.6.0/new-features/092029/high-availability

Thanks.

Regards,

Shafiq

[defsdefs12]

I have only checked this one, our professional support suggested that it is only supported with 2nodes on 7.4.4. Is the OS 7.6.1 already a mature release firmware?