Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Galamij
New Contributor

HA FortiGate using internal switch for connecting to one ISP

Dear all,

 

I want to set two FortiGates in HA mode and I don't want to buy a switch for Internet connection, I want to use the feature "Software Switch" from the Interfaces menu. It is possible, did somebody do this before?

Practically, I will have a switch set with 2 interfaces assigned on first FortiGate, which is connected to the ISP. And from the same switch, I will connect the second Fortigate, on the wan interface. How can I set the first FortiGate to have internet access also? And if the first firewall is down, then the secondary is down also. So, I have to set the Software Switch, but I don't know how to link the first fw wan interface to the switch, where is the ISP connected. Just create Software Switch on fw1 and assign the wan IP address?

 

config system switch-interface
edit VswitchWAN
set type switch
set member wan, port1
end
config system interface
edit VswitchWAN
set ip 100.100.100.100
set allowaccess https ssh ping
end

 

This is enough?

Be smart
Be smart
1 REPLY 1
Anonymous
Not applicable

Hello @Galamij,

 

Thank you for posting on Fortinet Community Forum.

I have not seen such topology before. However, I would suggest taking references from the link below. Can you explain through a network diagram about your network?

https://docs.fortinet.com/document/fortigate/6.2.10/cookbook/900885/ha-active-passive-cluster-setup

 

Thanks,

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors