Fotigate VM 7.2.4 HA in OVH Cloud

[techdsmart]

Hi Community,

I am trying to set up HA for my two FortiGate VMs running on VMware environment on OVH cloud dedicated servers. The FortiGate VMs are running on diffrenet datacenters in OVH.

Problem I am running is automatic move of the WAN/failover IP from one dedicated server to another. OVH recommends use of:

1. Custom script to detect downtime on one firewall and move the IP  via API (API failover IP move takes about 50-55 seconds to finish which means i will have up to 1minute downtime)
2. Common Address Redundancy Protocol or CARP. (They don't seem to know if this works with FortiGate or how to set it up)

My goal is to achieve active-passive failover between the two FortiGate while maintaining the same public IP.

There is no issue is configuring the VMs from the VMware side to accept promiscuous mode, issue is on the cloud provider on how they handle the WAN/failover IP.

Question: Has anyone encountered such a design? Is CARP feasible? Any idea on how to set up the this HA

[Falcon971]

Hello,

I was looking to do the same thing in OVH and was wondering if you succeed to do something?

Thank you.