Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
firdausi12
New Contributor III

HA Between Different Datacenters

Hello Team,

We have 2 datacenters across different states (kano / abuja) and we want to deploy one of our HA Availability each to different  locations due to redundancy.  Please keep in mind we have a VPN tunnel accross.

Please i need someone to help and guide me on how to achieve that in steps .

 

Regards,

Firdausi Nababa

FN
FN
2 REPLIES 2
rvijayaraj
Staff
Staff

Hi , 

There are few configuration which needs to enabled when setting up a HA in a ipsec vpn configured firewalls as below : 

1. session-pickup under HA settings

config vpn ipsec phase1-interface 

edit (vpn-name) 

set ha-sync-esp-seqno enable 

end

 

 

2. ha-sync-esp-seqno under IPsec phase1-interface settings 

config system ha

set session-pickup enable 

end

 

The below docs will help you in understanding the requirement for enabling the commands : 

 

https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/111309/ipsec-vpn-in-an-ha-environment

https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPSec-VPN-in-HA-Environment/ta-p/195849

 

Regards,

Roshan 

 

 

 

 

 

 

 

medaabreu


@rvijayaraj wrote:

Hi , 

There are few configuration which needs to enabled when setting up a HA in a ipsec vpn configured firewalls as below : 

1. session-pickup under HA settings

config vpn ipsec phase1-interface 

edit (vpn-name) 

set ha-sync-esp-seqno enable 

end

 

 

2. ha-sync-esp-seqno under IPsec phase1-interface settings 

config system ha

set session-pickup enable 

end

 

The below docs will help you in understanding the requirement for enabling the commands : 

 

https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/111309/ipsec-vpn-in-an-ha-environment

https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPSec-VPN-in-HA-Environment/ta-p/195849

 

Regards,

Roshan


Thanks for this - much appreciated!

,
,
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors