Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
konka
New Contributor

Fortigate behind HAProxy

Hi all. I need some help, please.

I have fortigate 60e, just for ssl vpn, and 2 wan. for high aviability i setup HAProxy on cloud vdc. config HAProxy now:

 

defaults log global mode http option httplog option dontlognull option clitcpka option srvtcpka timeout connect 120s timeout client 120s timeout server 120s errorfile 400 /etc/haproxy/errors/400.http errorfile 403 /etc/haproxy/errors/403.http errorfile 408 /etc/haproxy/errors/408.http errorfile 500 /etc/haproxy/errors/500.http errorfile 502 /etc/haproxy/errors/502.http errorfile 503 /etc/haproxy/errors/503.http errorfile 504 /etc/haproxy/errors/504.http   frontend info80 mode http bind 2.2.2.2:80 redirect scheme https code 301 if !{ ssl_fc } frontend info443 bind 2.2.2.2:443 option tcplog option clitcpka mode tcp default_backend sginfonodes backend infonodes mode tcp option srvtcpka balance roundrobin option ssl-hello-chk server web01 1.1.1.1:443 check server web02 1.1.1.1:443 check   obviously, in ssl-vpn monitor host ip it is ip of HAProxy. If i set up in config of HAProxy - server web02 1.1.1.1:443 check send-proxy - service is down.   How can i send source host ip to forigate from HAProxy?   sorry for my english
0 REPLIES 0
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors