HA Configuration

[VinothK]

Hi Team,

I am planning to configure HA on FortiGate 60F firewalls in Active-Passive mode, and I want to connect two ISP links directly to the firewalls. Is it possible?

[AEK]

Hi Vinoth

You need to use a switch between the FGTs and the ISP router.

Some routers may already have an integrated L2 switch.

[VinothK]

Hi AEK

Thanks for the input.

Is it possible to connect the Forti Gates directly to the ISP router without using a switch?
If the router has an integrated L2 switch or supports multiple interfaces, can we still achieve redundancy or load balancing without adding an external switch?

[AEK]

If you connect the ISP router to only one FGT then you will lose the internet in case of FGT HA fail-over.

If the router has an integrated L2 switch then you can connect it to both FGTs without the need of additional switch.

[VinothK]

Thank you for the clarification!